52 matches found
CVE-2020-8817
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...
CVE-2020-8817
CVE-2020-8817 affects Dataiku DSS prior to 6.0.5. The issue lets an attacker with access to a project modify the project’s Created by metadata (write access to the project). CVSS vectors indicate high impact for confidentiality and integrity (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N; base 8.1). No exp...
CVE-2020-8817: Undefined Security Weakness
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...
PT-2020-20300
Name of the Vulnerable Software and Affected Versions Dataiku DSS versions prior to 6.0.5 Description The issue allows attackers to gain write access to a project, enabling them to modify the Created by metadata. Recommendations For versions prior to 6.0.5, update to version 6.0.5 or later to...
Dataiku DSS Information Disclosure Vulnerability
Dataiku DSS is a data processing collaboration platform. the REST API is one of the APIs that supports lightweight REST style web scripts. A security vulnerability exists in the REST API in Dataiku DSS versions prior to 4.2.3. A remote attacker could exploit the vulnerability to obtain sensitive...
CVE-2018-10732
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information i.e., determine if a username is valid because of profile pictures visibility...
Cross site request forgery (csrf)
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information i.e., determine if a username is valid because of profile pictures visibility...
CVE-2018-10732
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information i.e., determine if a username is valid because of profile pictures visibility...
CVE-2018-10732
Dataiku DSS REST API (affected product: Dataiku DSS) prior to version 4.2.3 is affected. The vulnerability arises from profile pictures visibility in the REST API, enabling remote attackers to determine whether a username is valid (information disclosure). The root cause is insufficient access co...
PT-2018-10070
Name of the Vulnerable Software and Affected Versions Dataiku DSS versions prior to 4.2.3 Description The issue allows remote attackers to obtain sensitive information, specifically determining if a username is valid, due to the visibility of profile pictures in the REST API. Recommendations For...
CVE-2018-10732: Exposure of Sensitive Information to an Unauthorized Actor
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information i.e., determine if a username is valid because of profile pictures visibility...
