Cloudera Data Science Workbench
5 CVEs affecting Cloudera Data Science Workbench. Latest disclosed: 2019-11-26. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20091 | Critical | 9.9 | 2019-06-07 | An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrar… |
CVE-2018-11215 | Critical | 9.8 | 2019-07-03 | Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors. |
CVE-2017-15536 | High | 8.8 | 2018-02-05 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users… |
CVE-2018-20090 | High | 8.3 | 2019-11-26 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-w… |
CVE-2018-15665 | Medium | 5.3 | 2019-06-21 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts. |