ID:11186 - Exploit for Authentication bypass using an alternate path or channel in Vantara Pentaho Business Analytics Server - CVE-2022-43939

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication. 

The vulnerability exists due to an error when handling non-canonical URLs. A remote non-authenticated attacker can bypass authentication process using a specially crafted URL and gain unauthorized access to the application.

Remediation