Описание
A vulnerability in
Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 8.3.0.0 (включая) до 8.3.0.25 (исключая)Версия от 9.2.0.0 (включая) до 9.2.0.2 (исключая)
Одно из
cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.0019
Низкий
5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-548
CWE-281
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.
EPSS
Процентиль: 41%
0.0019
Низкий
5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-548
CWE-281