← Database

CVE-2023-1158

MEDIUM CVSS: 4.3 Published: 2023-05-24 Modified: 2026-06-17

Description

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list. 

Affected Platforms

Hitachi Vantara PentahoHitachi Vantara Pentaho Business Analytics Server

Weakness Type

CWE-863, CWE-863

References