Hitachi Vantara Pentaho Business Analytics Server Incorrect Authorization Vulnerability

A vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server in versions prior to 10.2.0.0 and 9.3.0.8, including 8.3.x. The issue arises because the product fails to properly enforce authorization checks in the data source management service. This lack of proper access control allows users to access restricted data or perform unauthorized actions, potentially leading to information exposure or denial-of-service conditions.

Impact

Exploitation of this vulnerability could result in unauthorized access to data or the ability to perform actions without proper authorization, potentially causing information exposure or denial-of-service issues.

Remediation

Users can upgrade to Pentaho Business Analytics Server version 10.2.0.0 or 9.3.0.8 to address this vulnerability.