Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r2q6-xhr4-wgjw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.

EPSS

Процентиль: 44%
0.00216
Низкий

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 4.3
nvd
больше 4 лет назад

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.

EPSS

Процентиль: 44%
0.00216
Низкий

Дефекты

CWE-552