Vulnerabilities

TI-2018-14235 CVE-2018-20090 · GHSA-p4rw-m677-p78f

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

LOW 38

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00832 Published 2019-11-26 No fix listed CWE-276

TI-2018-07979 CVE-2018-11215 · GHSA-pq9f-gcj3-hc3c

MEDIUM 47

Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02399 Published 2019-07-03 No fix listed CWE-200

TI-2018-11160 CVE-2018-15665 · GHSA-v9fc-8cwf-fm4g

LOW 26

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01195 Published 2019-06-21 No fix listed CWE-200

TI-2018-14236 CVE-2018-20091 · GHSA-rm2v-wh2x-rj6w

MEDIUM 44

An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0099 Published 2019-06-07 No fix listed CWE-89

TI-2017-11358 CVE-2017-15536 · GHSA-6gh6-8c4x-5346

MEDIUM 40

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00918 Published 2018-02-05 No fix listed CWE-269