Improper Permission Handling in Hitachi Vantara Pentaho Business Analytics Server

CVE-2024-6697

What is CVE-2024-6697?

Hitachi Vantara Pentaho Business Analytics Server fails to properly handle insufficient permissions, which allows an adversary to exploit legitimate application functionalities. This can result in unexpected code execution paths and may leave the server in an unstable state, ultimately leading to denial of service. It is crucial for users of affected versions to implement timely updates to safeguard against potential exploitation.

References