CVE-2023-2358

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext. 
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hitachivantara:pentaho_business_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:hitachivantara:pentaho_business_analytics:8.3.0.0:*:*:*:*:*:*:*

History

29 Sep 2023, 17:32

Type Values Removed Values Added
References (MISC) https://support.pentaho.com/hc/en-us/articles/19668208622221 - (MISC) https://support.pentaho.com/hc/en-us/articles/19668208622221 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.9
CWE CWE-312
First Time Hitachivantara pentaho Business Analytics
Hitachivantara
CPE cpe:2.3:a:hitachivantara:pentaho_business_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:hitachivantara:pentaho_business_analytics:8.3.0.0:*:*:*:*:*:*:*

27 Sep 2023, 15:40

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-27 15:18

Updated : 2024-02-28 20:33


NVD link : CVE-2023-2358

Mitre link : CVE-2023-2358

CVE.ORG link : CVE-2023-2358


JSON object : View

Products Affected

hitachivantara

  • pentaho_business_analytics
CWE
CWE-312

Cleartext Storage of Sensitive Information

CWE-257

Storing Passwords in a Recoverable Format