CVE-2023-2358

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.5.0.0 Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.3.0.4 Hitachi Vantara Pentaho Business Analytics Server version 8.3.x.x

Description The issue is related to the storage of passwords in a recoverable format. This allows a remote attacker to potentially disclose protected information. The passwords of the Hadoop Copy Files step are saved in plaintext.

Recommendations For versions prior to 9.5.0.0, update to version 9.5.0.0 or later. For versions prior to 9.3.0.4, update to version 9.3.0.4 or later. For version 8.3.x.x, update to a version outside of the 8.3.x.x range, such as version 9.3.0.4 or later. As a temporary workaround, consider restricting access to the Hadoop Copy Files step until a patch is available.