Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pentaho_data_integration_and_analytics | Hitachi | 1.0 (including) | 9.3.0.5 (excluding) |
| Pentaho_data_integration_and_analytics | Hitachi | 9.4.0.0 (including) | 9.5.0.1 (excluding) |