CVE-2021-45446— Pentaho Business Analytics Server - Exposure of Information Through Directory Listing
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-45446
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pentaho Business Analytics Server - Exposure of Information Through Directory Listing
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Hitachi Vantara Pentaho Business Analytics Server versions before 9.2.0.2 and 8.3.0.25 does not cascade the hidden property to the children of the Home folder. This directory listing provides an attacker with the complete index of all the resources located inside the directory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过目录枚举导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Hitachi Pentaho Business Analytics 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hitachi Pentaho Business Analytics是日本日立制作所（Hitachi）公司的一个业务分析平台。用于安全地访问、集成、操作、可视化和分析大数据资产。 Hitachi Pentaho Business Analytics 9.2.0.2 版本之前的 9.2 版本和 8.3.0.25 版本之前的 8.3 版本存在安全漏洞，该漏洞源于不会将隐藏属性级联到主文件夹的子文件夹。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hitachi Vantara | Pentaho Business Analytics Server | 1.0 ~ 8.3.0.25 | - |
II. Public POCs for CVE-2021-45446
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-45446
请登录查看更多情报信息。
Other References for CVE-2021-45446 (1)
Same Patch Batch · Hitachi Vantara · 2022-11-02 · 3 CVEs total
| CVE-2021-45447 | 7.7 HIGH | Pentaho Business Analytics Server - With the Data Lineage feature enabled, the system tra |
| CVE-2021-45448 | 7.1 HIGH | Pentaho Business Analytics Server - Pentaho Analyzer plugin exposes a service endpoint for |
IV. Related Vulnerabilities
Same product: Pentaho Business Analytics Server
- CVE-2025-24911
Hitachi Vantara Pentaho Business Analytics Server - Improper - CVE-2025-24910
Hitachi Vantara Pentaho Business Analytics Server - Improper - CVE-2025-24909
Hitachi Vantara Pentaho Business Analytics Server - Improper - CVE-2025-0757
Hitachi Vantara Pentaho Business Analytics Server - Improper - CVE-2025-0758
Hitachi Vantara Pentaho Business Analytics Server - Incorrec
Same vendor: Hitachi Vantara
- CVE-2026-2253
Hitachi Vantara Pentaho Data Integration & Analytics - Impro - CVE-2026-2255
Hitachi Vantara Pentaho Data Integration & Analytics - Insuf - CVE-2026-2254
Hitachi Vantara Pentaho Data Integration & Analytics - Incor - CVE-2025-11159
Hitachi Vantara Pentaho Data Integration & Analytics - Depen - CVE-2025-11158
Hitachi Vantara Pentaho Data Integration & Analytics - Missi
Same weakness: CWE-548
- CVE-2026-50233
Lyrion Music Server 9.2.0 Arbitrary Directory Listing - CVE-2025-32750
Dell PowerFlex Manager 安全漏洞 - CVE-2026-41933
Vvveb < 1.0.8.3 Directory Listing Information Disclosure - CVE-2023-38265
Improper Access Control and Exposure of Information Through - CVE-2020-36921
RED-V Super Digital Signage System 5.1.1 Log Information Dis
V. Comments for CVE-2021-45446
No comments yet