How severe is CVE-2021-45446?

CVE-2021-45446 has a CVSS v3 score of 5 (MEDIUM).

CVE-2021-45446

Name: vantara_pentaho
Author: hitachi

5.0MEDIUM

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory li

Published: 11/2/2022Updated: 11/21/2024

Description

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.

AI AnalysisPowered by AI

Affected Products

hitachivantara_pentaho

References

https://support.pentaho.com/hc/en-us/articles/6744813983501
Vendor Advisory
https://support.pentaho.com/hc/en-us/articles/6744813983501
Vendor Advisory