Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jgwp-h4gx-xm93

Опубликовано: 02 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.

EPSS

Процентиль: 41%
0.0019
Низкий

7.5 High

CVSS3

Дефекты

CWE-281
CWE-548
CWE-668

Связанные уязвимости

CVSS3: 5
nvd
больше 3 лет назад

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder.  This directory listing provides an attacker with the complete index of all the resources located inside the directory.

EPSS

Процентиль: 41%
0.0019
Низкий

7.5 High

CVSS3

Дефекты

CWE-281
CWE-548
CWE-668