CVE-2023-1158

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x

Description The issue is related to improper authorization in the Hitachi Vantara Pentaho Business Analytics Server. Exploitation of this issue may allow a remote attacker to disclose protected information.

Recommendations For versions before 9.4.0.1, update to version 9.4.0.1 or later. For versions before 9.3.0.3, update to version 9.3.0.3 or later. For version 8.3.x, consider upgrading to a newer version that includes the necessary security fixes. At the moment, there is no information about additional mitigation measures for version 8.3.x.