Data Science Workbench (CDSW)
by Cloudera
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-15536 | Hig | 0.57 | 8.8 | 0.01 | Feb 5, 2018 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access… | ||
| CVE-2018-20090 | 0.00 | — | 0.01 | Nov 26, 2019 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder. | |||
| CVE-2018-11215 | 0.00 | — | 0.02 | Jul 3, 2019 | Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors. | |||
| CVE-2018-15665 | 0.00 | — | 0.01 | Jun 21, 2019 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts. |
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access…
- CVE-2018-20090Nov 26, 2019risk 0.00cvss —epss 0.01
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.
- CVE-2018-11215Jul 3, 2019risk 0.00cvss —epss 0.02
Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.
- CVE-2018-15665Jun 21, 2019risk 0.00cvss —epss 0.01
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts.