Medium severity5.0NVD Advisory· Published Nov 2, 2022· Updated Jun 17, 2026
CVE-2021-45446
CVE-2021-45446
Description
A vulnerability in
Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.
Affected products
3<9.2.0.2, <8.3.0.25+ 1 more
- (no CPE)range: <9.2.0.2, <8.3.0.25
- (no CPE)range: 1.0
Patches
Vulnerability mechanics
References
1- support.pentaho.com/hc/en-us/articles/6744813983501nvdVendor Advisory
News mentions
0No linked articles in our index yet.