CVE-2021-34684

概要

参考情報

• packetstormsecurity.com/files/164791/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-SQL-Injection.html · Exploit
• hitachi.com/hirt/security/index.html · Vendor Advisory

vantara pentaho のその他の脆弱性

• CVE-2023-1158中 4.3 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users wh…
• CVE-2022-4815高 8.8 Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data with…
• CVE-2021-45448中 6.5Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 using the Pentaho Analyzer plugin exposes a service endpoint for te…
• CVE-2021-45447高 7.5 Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 with the Data Lineage feature enabled tran…
• CVE-2021-45446高 7.5A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden pro…