CVE-2023-2358CWE-257

Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format

Medium · published September 26, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.6th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2023-09-26T21:34Z
EPSS history
Timeline
  • 26 SEP 21:34Z
    Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format
    cvelistv5