Information Disclosure in Hitachi Vantara Pentaho Data Integration and Analytics

CVE-2025-9122

What is CVE-2025-9122?

The Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to version 10.2.0.4 poses an information disclosure risk by exposing the complete server stack trace when an error occurs within the GetCdfResource servlet. This flaw can potentially allow attackers to gain insights into the internal functioning of the server and exploit other vulnerabilities within the system. Implementing updates to versions 10.2.0.4 and later is essential to safeguard against this exposure.

References