PT-2017-7916 · Hitachi Vantara · Pentaho Ba Platform

Published 2017-11-28 · Updated 2017-12-17 · CVE-2016-10701

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho BA Platform versions prior to 8.1

Description A CSRF issue exists in the Business Analytics application of the Hitachi Vantara Pentaho BA Platform, which may allow unauthorized actions to be performed.

Recommendations For versions prior to 8.1, update to version 8.1 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2016-10701

Affected Products

Pentaho Ba Platform

References · 6

• https://osv.dev/vulnerability/CVE-2016-10701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10701 · Security Note
• http://securityfocus.com/bid/102200 · Note
• http://jira.pentaho.com/browse/BISERVER-3562 · Note
• http://jira.pentaho.com/browse/BISERVER-6599 · Note
• http://jira.pentaho.com/browse/BISERVER-13207 · Note