Hitachi Vantara Pentaho Business Analytics Server Access Control Vulnerability in User Console Trash

A vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server in versions prior to 10.2.0.0 and 9.3.0.9, including 8.3.x. The issue arises from access controls that are too broad, allowing unauthorized agents to access security-sensitive assets. Specifically, the authorization check in the user console trash content is insufficient, enabling attackers to bypass intended protections and gain unauthorized access.

Impact

Exploitation of this vulnerability allows for unauthorized access to security-sensitive assets by bypassing access control measures.