CVE-2024-5705

Summary

CVE-2024-5705 is a vulnerability affecting Hitachi Vantara Pentaho Business Analytics Server versions prior to 10.2.0.0 and 9.3.0.9, including 8.3.x. This issue stems from inadequate authorization checks, allowing attackers to bypass intended access restrictions (CWE-863). As a result, users may gain unauthorized access to data or perform prohibited actions, potentially leading to information exposures or denial of service. Moreover, these servers have modules enabled by default that enable execution of system-level processes, further increasing the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.