CVE-2022-43939

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Description

Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.

Severity: HIGH

CVSS Score: 8.6

Vendor: Hitachi Vantara

Product: Pentaho Business Analytics (BA) Server