EUVD-2020-19464

Malware in sbrugna...

EUVD-2021-26510

Malware in sbrugna...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

Cloudera Data Engineering Information Disclosure Vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, USA that supports the creation of Apache Spark tasks on a cloud platform. A security vulnerability exists in Cloudera Data Engineering CDE version 1.3.0 that stems from a JWT authentication token being exposed t...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

Authentication flaw

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

Cloudera Data Engineering information leakage vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, USA that supports the creation of Apache Spark tasks on a cloud platform. A security vulnerability exists in Cloudera Data Engineering CDE version 1.3.0 that stems from a JWT authentication token being exposed t...

CVE-2021-3167: Insertion of Sensitive Information into Log File

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

PT-2021-19472

Name of the Vulnerable Software and Affected Versions Cloudera Data Engineering version 1.3.0 Description The issue concerns the exposure of JWT authentication tokens to administrators in virtual cluster server logs. This affects Cloudera Data Engineering, where sensitive information is...

Cloudera Data Engineering Cross-Site Request Forgery Vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, Inc. that supports the creation of Apache Spark tasks on a cloud platform. A cross-site request forgery vulnerability exists in Cloudera Data Engineering versions prior to 1.1, which stems from vulnerability to...

CVE-2020-26936

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

CVE-2020-26936

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

Cross site request forgery (csrf)

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

CVE-2020-26936

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

CVE-2020-26936

CVE-2020-26936 concerns Cloudera Data Engineering (CDE) before version 1.1, where a Cross-Site Request Forgery (CSRF) vulnerability exists. The provided documents identify the affected product and the vulnerability type but do not include detailed technical exploit steps, affected endpoints, or r...

CVE-2020-26936: Cross-Site Request Forgery (CSRF)

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

PT-2020-16559

Name of the Vulnerable Software and Affected Versions Cloudera Data Engineering CDE versions prior to 1.1 Description The issue concerns a CSRF attack. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

Cloudera Data Engineering Cross-site Request Forgery Vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, Inc. that supports the creation of Apache Spark tasks on a cloud platform. A cross-site request forgery vulnerability exists in Cloudera Data Engineering versions prior to 1.1, which stems from vulnerability to...