CVE-2022-4769: Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information
Published Apr 3, 2023
·Updated
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name.
Affected Software
1 affected component
Hitachi Vantara Pentaho Business Analytics Server<9.3.0.2
Event History
Apr 3, 2023
CVE Published
via MITRE·06:53 PM
Data Sourced
via MITRE·06:53 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-4769.
2
What is the severity of CVE-2022-4769?
The severity of CVE-2022-4769 is medium with a CVSSv3 score of 4.3.
3
What software is affected by CVE-2022-4769?
Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.4.0.0 and 9.3.0.2, including 8.3.x, are affected by CVE-2022-4769.
4
What is the impact of CVE-2022-4769?
CVE-2022-4769 allows an attacker to display the target path on the host when a file with an invalid character in its name is uploaded.
5
Is there a fix available for CVE-2022-4769?
Yes, the fix for CVE-2022-4769 is available in versions 9.4.0.0 and 9.3.0.2 of Hitachi Vantara Pentaho Business Analytics Server.