CVE-2025-9122 — Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

CVE-2025-9122

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information PUBLISHED

Description (CNA)

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Affected (CNA)

Vendor / product	Versions
Hitachi Vantara / Pentaho Data Integration and Analytics	affected 1.0 before 10.2.0.4

CWE

CWE-209

References

https://support.pentaho.com/hc/en-us/articles/41833799577741--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-10-2-0-4-Impacted-CVE-2025-9122

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.