CVE-2023-2358

Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format

State: Published
Severity: 4.3 Medium
Published: Sep 26, 2023
Updated: Sep 23, 2024
Reserved: Apr 27, 2023

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	HITVAN

Weaknesses

CWE-257

Affected Products

Product	Versions
Pentaho Business Analytics ServerHitachi Vantara	1.0 to before 9.3.0.5Affected 9.5.0.0 to before 9.5.0.1Affected

References

https://support.pentaho.com/hc/en-us/articles/19668208622221

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.