Required CVE Record Information
Description
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 3.8 | LOW | 3.1 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N |
Credits
- Harry Withington, Aura Information Security finder
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.