VULNERABILITY INTELLIGENCE

CVE-2022-43772

CVSS score3.8 LOW
EPSS probability0.39%
CISA KEVNot currently listed
Published2023-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs.

Weakness classification

  • security.vulnerabilities@hitachivantara.com: CWE-532
  • nvd@nist.gov: CWE-532

Primary references