Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
Hitachi Vantara · Pentaho Business Analytics (BA) Server
Date added (CISA)
2025-03-03
Remediation due
2025-03-24
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.