CVE-2021-31600

Related Files

Pentaho Business Analytics / Pentaho Business Server 9.1 User Enumeration

Posted Nov 5, 2021

Authored by Altion Malka, Alberto Favero

Pentaho implements a series of web services using the SOAP protocol to allow scripting interaction with the backend server. HAWSEC identified that the services userRoleListService and ServiceAction exposed through the /pentaho/webservices/userRoleListService and /pentaho/ServiceAction?action=SecurityDetails endpoints are not enforcing sufficient access controls. Specifically, an authenticated user can list all application usernames present in the Jackrabbit Repository.

tags | exploit, web, protocol

advisories | CVE-2021-31600

SHA-256 | df24858a662120cb07ae1d884fbbf73c40dde32c2c707e40ade959b4c867fc35

Download | Favorite | View