Data Science Workbench@* Security Vulnerabilities and Issues — Data Science Workbench@* CVE List

Lucene search

ClouderaData Science Workbench*

5 matches found

CVE•added 2019/06/21 3:15 p.m.•285 views

CVE-2018-15665

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts.

5.3CVSS5.3AI score0.0035EPSS

CVE•added 2019/07/03 4:15 p.m.•50 views

CVE-2018-11215

Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.

9.8CVSS9.6AI score0.03063EPSS

CVE•added 2019/06/07 4:29 p.m.•40 views

CVE-2018-20091

An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrary queries against CDSW's internal database. The database contains user contact information, encrypted CDSW passwords (in the case of local a...

9.9CVSS9.2AI score0.01466EPSS

CVE•added 2018/02/05 3:29 a.m.•38 views

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

8.8CVSS8.8AI score0.0032EPSS

CVE•added 2019/11/26 4:15 p.m.•27 views

CVE-2018-20090

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.

8.3CVSS8.2AI score0.00317EPSS