CVE-2023-5617

Summary

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.

Affected Software

VendorProductVersion RangeStatus
Hitachi VantaraPentaho Data Integration & Analytics1.0 < 9.3.0.6affected
Hitachi VantaraPentaho Data Integration & Analytics9.4.0.0 < 10.1.0.0affected

Weaknesses

  • CWE-550: CWE-550: Server-generated Error Message Containing Sensitive Information

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References