Insufficient Access Control in Hitachi Vantara Pentaho Business Analytics Server

CVE-2024-6696

What is CVE-2024-6696?

The Hitachi Vantara Pentaho Business Analytics Server exhibits a flaw in its access control implementation, allowing unauthorized agents to access sensitive assets. The access controls are too broad, failing to enforce necessary restrictions, leading to potential unauthorized actions within the system. This vulnerability affects versions prior to 10.2.0.0 and 9.3.0.9, as well as the 8.3.x series, highlighting the importance of stringent access control measures to safeguard sensitive information.

References