Design/Logic Flaw

2019-11-2616:15:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.

CPENameOperatorVersion
data_science_workbenchge1.4.0
data_science_workbenchle1.4.2

CPE	Name	Operator	Version
	data_science_workbench	ge	1.4.0
	data_science_workbench	le	1.4.2

References

docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html