PT-2017-7916 · Hitachi Vantara · Pentaho Ba Platform

Publicado 2017-11-28 · Atualizado 2017-12-17 · CVE-2016-10701

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho BA Platform versions prior to 8.1

Description A CSRF issue exists in the Business Analytics application of the Hitachi Vantara Pentaho BA Platform, which may allow unauthorized actions to be performed.

Recommendations For versions prior to 8.1, update to version 8.1 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2016-10701

Produtos afetados

Pentaho Ba Platform

Referências · 6

• http://securityfocus.com/bid/102200 · Nota
• http://jira.pentaho.com/browse/BISERVER-3562 · Nota
• http://jira.pentaho.com/browse/BISERVER-6599 · Nota
• https://osv.dev/vulnerability/CVE-2016-10701 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10701 · Nota de Segurança
• http://jira.pentaho.com/browse/BISERVER-13207 · Nota