Cloudera: >> Data Science Workbench >> 1.4.2 Security Vulnerabilities
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.
CVSS Score
8.3
EPSS Score
0.003
Published
2019-11-26
An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrary queries against CDSW's internal database. The database contains user contact information, encrypted CDSW passwords (in the case of local authentication), API keys, and stored Kerberos keytabs.
CVSS Score
9.9
EPSS Score
0.015
Published
2019-06-07