Download
| Alert*
Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic. CVSS Score and Metrics +CVSS Score and Metrics -
|