CVE-2021-3167

In Cloudera Data Engineering (CDE) 1.3.0, the CVE-2021-3167 issue involves JWT authentication tokens being exposed to administrators via virtual cluster server logs. This is a disclosure impacting confidentiality (tokens visible in logs). The available connected documentation confirms the affecte...

CVE-2020-26936

CVE-2020-26936 concerns Cloudera Data Engineering (CDE) before version 1.1, where a Cross-Site Request Forgery (CSRF) vulnerability exists. The provided documents identify the affected product and the vulnerability type but do not include detailed technical exploit steps, affected endpoints, or r...