PT-2023-2084 · Hitachi Vantara · Hitachi Vantara Pentaho Business Analytics Server

Publicado 2023-04-03 · Atualizado 2025-03-13 · CVE-2022-43769

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.4.0.1 and 9.3.0.2, including 8.3.x

Description The issue is related to the incorrect neutralization of special elements in output, which can allow a remote attacker to execute arbitrary commands by injecting specially crafted Spring templates. Certain web services in the affected software allow setting property values that contain Spring templates, which are interpreted downstream.

Recommendations For versions prior to 9.4.0.1, update to version 9.4.0.1 or later. For versions prior to 9.3.0.2, update to version 9.3.0.2 or later. As a temporary workaround, consider restricting access to web services that allow setting property values with Spring templates until a patch is available.

Exploit

Correção

Special Elements Injection

Code Injection

Enumeração de Fraquezas

CWE-74

CWE-94

Identificadores relacionados

BDU:2023-01817

CVE-2022-43769

Produtos afetados

Hitachi Vantara Pentaho Business Analytics Server

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pentaho_business_server_authbypass_and_ssti.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/172296/Pentaho-Business-Server-Authentication-Bypass-SSTI-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/51350 · Exploit
• https://reddit.com/r/pwnhub/comments/1j2rbqo/cisa_warns_of_newly_exploited_vulnerabilities · Publicação no Reddit
• https://bdu.fstec.ru/vul/2023-01817 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-43769 · Aviso do Fabricante
• https://t.me/cvenotify/114735 · Publicação no Telegram
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-43769 · Nota
• https://twitter.com/ScyScan/status/1896955390329561586 · Publicação no Twitter
• https://support.pentaho.com/hc/en-us/articles/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769- · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/8078 · Publicação no Telegram
• https://support.pentaho.com/hc/en-us/articles/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769 · Nota de Segurança
• https://t.me/cvenotify/113283 · Publicação no Telegram
• https://twitter.com/transilienceai/status/1899286353185038364 · Publicação no Twitter
• https://t.me/cibsecurity/61355 · Publicação no Telegram