CVEDB API

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 56.6%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-15665

Cloudera » Data Science Workbench » Version: 1.2.0

cpe:2.3:a:cloudera:data_science_workbench:1.2.0
Cloudera » Data Science Workbench » Version: 1.2.1

cpe:2.3:a:cloudera:data_science_workbench:1.2.1
Cloudera » Data Science Workbench » Version: 1.2.2

cpe:2.3:a:cloudera:data_science_workbench:1.2.2
Cloudera » Data Science Workbench » Version: 1.3.0

cpe:2.3:a:cloudera:data_science_workbench:1.3.0
Cloudera » Data Science Workbench » Version: 1.3.1

cpe:2.3:a:cloudera:data_science_workbench:1.3.1
Cloudera » Data Science Workbench » Version: 1.4.0

cpe:2.3:a:cloudera:data_science_workbench:1.4.0