Unrated severityNVD Advisory· Published Nov 2, 2022· Updated May 2, 2025

Pentaho Business Analytics Server - Exposure of Information Through Directory Listing

CVE-2021-45446

Description

A vulnerability in

Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.

Affected products

Pentaho/Business Analyticsllm-fuzzy
Range: <9.2.0.2, <8.3.0.25
Hitachi/Pentaho Business Analyticscpe-rescue
Range: 1.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.pentaho.com/hc/en-us/articles/6744813983501mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000