CVE-2021-45447
Severity CVSS v4.0:
Pending analysis
Type:
CWE-319
Cleartext Transmission of Sensitive Information
Publication date:
02/11/2022
Last modified:
07/11/2023
Description
<br />
Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.2 and <br />
8.3.0.25 with the Data Lineage feature enabled transmits database passwords in clear text. <br />
<br />
The transmission of sensitive data in clear text allows unauthorized actors with access to the <br />
network to sniff and obtain sensitive information that can be later used to gain unauthorized <br />
access.<br />
<br />
<br />
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:* | 8.3.0.0 (including) | 8.3.0.25 (excluding) |
| cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:* | 9.2.0.0 (including) | 9.2.0.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page