Description
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Pentaho Business Analytics Server | Hitachi Vantara / Pentaho Business Analytics Server | >= 1.0, < 9.3.0.2 | affected |
| Pentaho Business Analytics Server | Hitachi Vantara / Pentaho Business Analytics Server | >= 9.4.0.0, < 9.4.0.1 | affected |