CVE-2022-43938

Publication date

2023-04-03 18:06:54

Family

HITVAN

State

PUBLISHED

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports (*.prpt) through the JVM script manager.