Jiangnan One Point Rain vhr Information Leakage Vulnerability

The Jiangnanvhr system has a vulnerability regarding information leakage. This vulnerability stems from the GET /chat/hrs interface, where any authenticated user can access other operators’ BCrypt hashed passwords. Operators with low privileges may be able to collect administrator password hashes...

Design/Logic Flaw

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

PT-2018-5907

Name of the Vulnerable Software and Affected Versions: Cloudera Data Science Workbench versions prior to 1.2.0 Description: An issue in Cloudera Data Science Workbench allows malicious authenticated users to escalate privileges. By exploiting several web application vulnerabilities, users can gai...