VULNERABILITY INTELLIGENCE

CVE-2021-45446

CVSS score5 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2022-11-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder.  This directory listing provides an attacker with the complete index of all the resources located inside the directory.

Weakness classification

  • security.vulnerabilities@hitachivantara.com: CWE-548
  • nvd@nist.gov: CWE-281

Primary references