{"id":"CVE-2023-5617","aliases":["EUVD-2023-57910","GHSA-69jc-r7p8-4cpg"],"status":"published","title":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics - Server-generated Error Message Containing  Sensitive Information","description":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00376,"percentile":0.31905,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-209","CWE-550"],"published":"2024-02-28T22:30:40Z","modified":"2026-06-17T06:48:57Z","products":[{"vendor":"hitachi","product":"vantara_pentaho_data_integration_and_analytics"},{"vendor":"hitachi vantara","product":"pentaho data integration \u0026 analytics"},{"vendor":"hitachi_vantara","product":"pentaho_data_integration_\\\u0026_analytics"}],"references":[{"url":"https://support.pentaho.com/hc/en-us/articles/24313358254861--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Server-generated-Error-Message-Containing-Sensitive-Information-Versions-before-10-1-0-0-and-9-3-0-6-including-all-versions-before-10-0-x-Impacted-CVE-2023-5617","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5617"},{"url":"https://github.com/advisories/GHSA-69jc-r7p8-4cpg"}],"sources":{"cve":[{"id":"CVE-2023-5617","title":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics - Server-generated Error Message Containing  Sensitive Information","description":"\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.\n\n\n\n","status":"published","published":"2024-02-28T22:30:40.128Z","modified":"2024-08-29T14:47:10.616Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-550"],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57910","description":"\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.\n\n\n\n","status":"published","published":"2024-02-28T22:30:40Z","modified":"2024-08-29T14:47:10Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:56:07.856103Z"}],"ghsa":[{"id":"GHSA-69jc-r7p8-4cpg","title":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6,...","description":"Hitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.","status":"published","published":"2024-02-29T00:30:23Z","modified":"2026-03-15T05:06:14Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209","CWE-550"],"updated_at":"2026-11-02T15:06:38.115187Z"}],"nvd":[{"id":"CVE-2023-5617","description":"\nHitachi Vantara Pentaho Data Integration \u0026 Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.\n\n\n\n","status":"published","published":"2024-02-28T23:15:08.26Z","modified":"2026-06-17T06:48:57.14Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-550","CWE-209"],"updated_at":"2026-11-02T14:09:07.077422Z"}]}}