CVE-2023-2358 — Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format

CVE-2023-2358

Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format PUBLISHED

Description (CNA)

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext.

Affected (CNA)

Vendor / product	Versions
Hitachi Vantara / Pentaho Business Analytics Server	affected 1.0 before 9.3.0.5; affected 9.5.0.0 before 9.5.0.1

CWE

CWE-257

References

https://support.pentaho.com/hc/en-us/articles/19668208622221

ADP enrichment

CVE

No English description supplied.

https://support.pentaho.com/hc/en-us/articles/19668208622221

CISA-ADP

No English description supplied.

No references supplied.