CVE-2022-43940

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.4.0.1 Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.3.0.2 Hitachi Vantara Pentaho Business Analytics Server version 8.3.x

Description The issue is related to incorrect authorization checks in the data source management service, which may allow a remote attacker to elevate their privileges.

Recommendations For versions prior to 9.4.0.1, update to version 9.4.0.1 or later. For versions prior to 9.3.0.2, update to version 9.3.0.2 or later. For version 8.3.x, consider upgrading to a newer version that includes the necessary authorization checks, such as version 9.3.0.2 or later.