Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

CVE-2022-43940

What is CVE-2022-43940?

The Hitachi Vantara Pentaho Business Analytics Server exhibits a vulnerability where authorization checks are not adequately enforced in the data source management service. This imperfection may allow unauthorized users to access sensitive data or manage resources they should not, posing potential risks to data integrity and confidentiality. Users are advised to update to the versions 9.4.0.1 or 9.3.0.2 to mitigate these risks and secure their analytics environments.

References