CVE-2009-5099

概要

参考情報

• antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities · Exploit
• jira.pentaho.com/browse/BISERVER-2698 · Exploit
• secunia.com/advisories/37024 · Vendor Advisory
• securityfocus.com/archive/1/507168/100/0/threaded
• vupen.com/english/advisories/2009/2972 · Vendor Advisory

bi server のその他の脆弱性

• CVE-2009-5101中 5.0Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session h…
• CVE-2009-5100低 2.1Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow phy…