Description
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Pentaho Business Analytics Server | Hitachi Vantara / Pentaho Business Analytics Server | >= 1.0, < 9.3.0.2 | affected |
| Pentaho Business Analytics Server | Hitachi Vantara / Pentaho Business Analytics Server | >= 9.4.0.0, < 9.4.0.1 | affected |