Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and
8.3.0.25 with the Data Lineage feature enabled transmits database passwords in clear text.
The transmission of sensitive data in clear text allows unauthorized actors with access to the
network to sniff and obtain sensitive information that can be later used to gain unauthorized
access.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Hitachi Vantara | Pentaho Business Analytics Server | unaffected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Vendor Solution
The defect may be mitigated now by disabling the Data Lineage feature or updating to a patched version
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2021-32218 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and 8.3.0.25 with the Data Lineage feature enabled transmits database passwords in clear text. The transmission of sensitive data in clear text allows unauthorized actors with access to the network to sniff and obtain sensitive information that can be later used to gain unauthorized access. |
| Link | Providers |
|---|---|
| https://support.pentaho.com/hc/en-us/articles/6744504393101 |
|
Fri, 02 May 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: HITVAN
Published:
Updated: 2025-05-02T20:38:51.406Z
Reserved: 2021-12-21T05:57:40.703Z
Link: CVE-2021-45447
Vulnrichment
Updated: 2024-08-04T04:39:20.773Z
NVD
Status : Modified
Published: 2022-11-02T15:15:10.247
Modified: 2024-11-21T06:32:13.613
Link: CVE-2021-45447
Redhat
No data.
OpenCVE Enrichment
No data.