CVE-2022-43939 Hitachi Vantara Pentaho Business Analytics (BA) Server
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.
- CVSS
- not scored
On CISA’s exploited list
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
- Added
- 2025-03-03
- Federal patch deadline
- 2025-03-24
- Ransomware use
- not known