CVE-2022-4769 - Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Back Back to CVE browser

MEDIUM

Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information

Published Apr 3, 2023

4.3

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name.

Affected products

Vendor Hitachi Vantara Product Pentaho Business Analytics Server Default
unaffected
- Version
  1.0
  Status
  affected
  Constraints
  <9.3.0.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hitachi Vantara

Pentaho Business Analytics Server

unaffected

Version	Status	Constraints
1.0	affected	<9.3.0.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-209

References (1)

https://support.pentaho.com/hc/en-us/articles/14452244712589--Resolved-Pentaho-BA-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4769-
Vendor Advisory

Link	Providers	Tags
https://support.pentaho.com/hc/en-us/articles/14452244712589--Resolved-Pentaho-BA-Server-Generation-of-Error-Message-Containing-Sensitive-Information-Versions-before-9-4-0-0-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-4769-		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner HITVAN

Published Apr 3, 2023

Updated Feb 11, 2025

Reserved Dec 27, 2022

Link CVE-2022-4769

CISA Vulnrichment

Updated Feb 11, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-4769

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-4769