CVE-2023-1158: Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
First published: Wed May 24 2023(Updated: )
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.
Credit: security.vulnerabilities@hitachivantara.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Vantara Pentaho Business Analytics Server | =9.4.0.0 | |
| Hitachi Vantara Pentaho Business Analytics Server | >=9.3.0.0<=9.3.0.3 | |
| Hitachi Vantara Pentaho | >=8.3.0.0<=8.3.0.25 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-1158?
CVE-2023-1158 is a vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x, that exposes dashboard prompts to unauthorized users.
What is the severity of CVE-2023-1158?
CVE-2023-1158 has a severity level of medium (4 out of 10).
How does CVE-2023-1158 affect Hitachi Vantara Pentaho Business Analytics Server?
CVE-2023-1158 allows unauthorized users to access dashboard prompts in Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x.
How can I fix CVE-2023-1158?
To fix CVE-2023-1158, it is recommended to upgrade to Hitachi Vantara Pentaho Business Analytics Server version 9.4.0.1 or 9.3.0.3, which have resolved the vulnerability.
Where can I find more information about CVE-2023-1158?
More information about CVE-2023-1158 can be found at the following link: [Pentaho BA Server Incorrect Authorization](https://support.pentaho.com/hc/en-us/articles/14456024873741-IMPORTANT-Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-3-including-8-3-x-Impacted-CVE-2023-1158-).
- collector/nvd-latest
- vendor/hitachi
- vendor/vantara pentaho business analytics server
- vendor/vantara pentaho
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/title
- agent/description
- agent/first-publish-date
- agent/event
- canonical/hitachi vantara pentaho business analytics server
- version/hitachi vantara pentaho business analytics server/9.4.0.0
- version/hitachi vantara pentaho business analytics server/9.3.0.0
- version/hitachi vantara pentaho business analytics server/9.3.0.3
- canonical/hitachi vantara pentaho
- version/hitachi vantara pentaho/8.3.0.0
- version/hitachi vantara pentaho/8.3.0.25