Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

CVE-2022-43939

Summary

The Hitachi Vantara Pentaho Business Analytics Server is affected by a vulnerability that allows an attacker to bypass security restrictions through non-canonical URLs. This flaw impacts versions prior to 9.4.0.1, 9.3.0.2, and includes the 8.3.x series, potentially allowing unauthorized access to sensitive functionalities within the analytics platform. Corrective measures are necessary to prevent exploitation and secure the server against unauthorized access.

References