CVE-2022-43940 — Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

Description (CNA)

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service.

Affected (CNA)

Vendor / product	Versions
Hitachi Vantara / Pentaho Business Analytics Server	affected 1.0 before 9.3.0.2; affected 9.4.0.0 before 9.4.0.1

CWE

CWE-863

References

https://support.pentaho.com/hc/en-us/articles/14456609400973--Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43940-

ADP enrichment

CVE

No English description supplied.

https://support.pentaho.com/hc/en-us/articles/14456609400973--Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43940-

CISA-ADP

No English description supplied.

No references supplied.