Pentaho Business Analytics Server - Exposure of Information Through Directory Listing
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5epss 0.4%
exploitation probability
0.4%top 62% of all CVEs
observed exploitation
nono source reports it
A vulnerability in
Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and
8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located
inside the directory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Affected products
Hitachi Vantara · Pentaho Business Analytics Server