Pentaho Business Analytics / Pentaho Business Server 9.1 Authentication Bypass

Pentaho Business Analytics and Pentaho Business Server versions 9.1 and below suffer from an authentication bypass vulnerability related to Spring APIs.