Remote Code Execution Vulnerability in Hitachi Vantara Pentaho
CVE-2021-31599

8.8HIGH

Key Information:

Vendor: Hitachi
Status: Vantara Pentaho; Vantara Pentaho Business Intelligence Server
Vendor: CVE Published:; 8 November 2021

What is CVE-2021-31599?

A security flaw has been identified in Hitachi Vantara Pentaho systems, which impacts the Pentaho Business Intelligence Server up to version 9.1 and earlier versions of the Pentaho Business Intelligence Server up to version 7.x. This vulnerability arises from the ability to include BeanShell scripts within reports (.prpt files), which allows an authenticated user to execute arbitrary code on the affected server. This risk poses significant challenges for data integrity and can lead to unauthorized access and manipulation of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch