CVE-2018-20091

CVEResult: Affected product is Cloudera Data Science Workbench (CDSW) versions 1.4.0–1.4.2. The issue is an SQL injection that would allow any authenticated user to execute arbitrary SQL queries against CDSW’s internal database. The internal DB stores user contact information, encrypted CDSW pass...

CVE-2018-20090

CVE-2018-20090 affects Cloudera Data Science Workbench (CDSW) versions 1.4.0–1.4.2. The issue is an access-control flaw that allows authenticated users to bypass project permission checks and gain read/write access to any project folder. Root cause: improper enforcement of project-level permissio...