Security Bulletin: IBM Data Science Experience Local is affected by a Cross-Site Scripting vulnerability

Summary IBM Data Science Experience Local has addressed the following vulnerability. IBM Data Science Experience Local was susceptible to cross-site scripting attacks against the User Management and Dataview services. Vulnerability Details Vulnerability Details CVEID: Not Applicable DESCRIPTION: ...

Security Bulletin: A security vulnerability has been identified in Node.js hoek shipped with Data Science Experience Local

Summary Node.js hoek is shipped as a component of Data Science Experience Local. Information about a security vulnerability affecting Node.js hoek has been published in a security bulletin. Vulnerability Details Please consult the security bulletins: CVE-2018-3728 for vulnerability details and...

Security Bulletin: Release of GDPR ready IBM Data Science Experience Local

Summary IBM Data Science Experience Local new release is GDPR ready. Vulnerability Details For more information on GDPR and Data Science Experience Local, see IBM Data Science Experience Local considerations for GDPR readiness Affected Products and Versions Principal Product and Versions --- IBM...

Security Bulletin: Security vulnerabilities have been identified in IBM Data Science Experience Local - Incorrect Handling of Non-Boolean Comparison During Minification

Summary IBM Data Science Experience Local - Information about security vulnerability concerning the incorrect handling of non-boolean comparison during minification. uglify-js package has been updated to a version with the fix. Vulnerability Details Please consult this advisory for more informati...

Security Bulletin: Security vulnerabilities have been identified in IBM Data Science Experience Local - Cross-Site Scripting

Summary IBM Data Science Experience Local - Information about security vulnerability concerning cross-site scripting. Code identified by static and dynamic scanner as vulnerable to cross-site scripting has been removed from DSX Local. Vulnerability Details Please consult this advisory for more...

Security Bulletin: Security vulnerabilities have been identified in IBM Data Science Experience Local - Cryptography.InsecureAlgorithm SHA-1

Summary IBM Data Science Experience Local - Information about security vulnerability concerning use of SHA-1 encryption algorithm Vulnerability Details DSX Local used the SHA-1 encryption algorithm. Please consult this advisory for more information about the security vulnerability. CWE-327 Affect...

CVE-2018-10732

The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information i.e., determine if a username is valid because of profile pictures visibility...

HELK: one with the advanced analysis capabilities of vulnerability discovery platform-vulnerability warning-the black bar safety net

Today to introduce to you is a guy named HELK a tool, it is a superior analytical capability of Hunting ELK（Elasticsearch, Logstash, Kibana is. ! Target 1. To the security community to provide a free vulnerability Hunting platform, and shared some basic security threats and vulnerability discover...

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

Design/Logic Flaw

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

CVE-2017-15536

CVE-2017-15536 affects Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. The CDSW web application contains multiple vulnerabilities that allow malicious authenticated users to escalate privileges within CDSW. By chaining these weaknesses, an attacker can achieve root access to CDSW nodes, ...

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

PT-2018-5907

Name of the Vulnerable Software and Affected Versions: Cloudera Data Science Workbench versions prior to 1.2.0 Description: An issue in Cloudera Data Science Workbench allows malicious authenticated users to escalate privileges. By exploiting several web application vulnerabilities, users can gai...

CVE-2017-15536: Improper Privilege Management

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

Cloudera Data Science Workbench Elevation of Privilege Vulnerability

Cloudera Data Science Workbench CDSW is a suite of data science platforms from US-based Cloudera. The platform provides fast, easy and secure self-service data science support for organizations. A security vulnerability exists in CDSW 1.2.0 prior to version 1.x. The vulnerability can be exploited...

September 7, 2017 – Morning Cyber Coffee Headlines – “NFL Kickoff” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 7, 2017 - Headlines Carbon Black in the News: Milton Security Announc...