CVE-2024-37362

Summary

CVE-2024-37362 is a vulnerability affecting Hitachi Vantara Pentaho Data Integration & Analytics versions prior to 10.2.0.0 and 9.3.0.8, including 8.3.x. This issue allows unauthorized parties to intercept or retrieve database passwords when saving connections to Amazon RedShift. The product's behavior of disclosing sensitive information is a breach of security best practices (CWE-522). The exposure of these credentials poses a significant risk, as attackers can further exploit the system with this sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.