CVE-2023-1158: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-1158?
CVE-2023-1158 is a vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x, that exposes dashboard prompts to unauthorized users.
What is the severity of CVE-2023-1158?
CVE-2023-1158 has a severity level of medium (4 out of 10).
How does CVE-2023-1158 affect Hitachi Vantara Pentaho Business Analytics Server?
CVE-2023-1158 allows unauthorized users to access dashboard prompts in Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x.
How can I fix CVE-2023-1158?
To fix CVE-2023-1158, it is recommended to upgrade to Hitachi Vantara Pentaho Business Analytics Server version 9.4.0.1 or 9.3.0.3, which have resolved the vulnerability.
Where can I find more information about CVE-2023-1158?
More information about CVE-2023-1158 can be found at the following link: [Pentaho BA Server Incorrect Authorization](https://support.pentaho.com/hc/en-us/articles/14456024873741-IMPORTANT-Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-3-including-8-3-x-Impacted-CVE-2023-1158-).