CVE-2022-43939: Hitachi Vantara Pentaho BA Server Authorization Bypass
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability. Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.
- CISA KEV-listed (remediation due 2025-03-24)
- EPSS 93.3% (99.8% percentile)