描述
A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.
AI分析AI驱动
受影响产品
hitachivantara_pentaho
hitachivantara_pentaho
参考资料
- https://support.pentaho.com/hc/en-us/articles/6744813983501Vendor Advisory
- https://support.pentaho.com/hc/en-us/articles/6744813983501Vendor Advisory