Hitachi Vantara Pentaho Business Analytics Server Karaf JMX Beans Permission Vulnerability

A vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server versions prior to 10.2.0.2, including 9.3.x and 8.3.x, where Karaf JMX beans are enabled and accessible by default. This configuration allows users with local execution privileges to access functionality exposed by these Karaf beans, potentially leading to unauthorized modification or reading of security-critical resources.

Impact

Exploitation of this vulnerability allows users with local execution privileges to access and manipulate functionality exposed by Karaf JMX beans, which could be used to modify or read sensitive resources within the application.