A vulnerability in
Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and
8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located
inside the directory.
References
Link | Resource |
---|---|
https://support.pentaho.com/hc/en-us/articles/6744813983501 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: HITVAN
Published: 2022-11-02T14:26:02.105Z
Updated:
Reserved: 2021-12-21T05:57:40.703Z
Link: CVE-2021-45446
JSON object: View
NVD Information
Status : Modified
Published: 2022-11-02T15:15:09.683
Modified: 2023-11-07T03:39:50.490
Link: CVE-2021-45446
JSON object: View
Redhat Information
No data.