Vulnerabilities > Cloudera > Data Science Workbench

DATE CVE VULNERABILITY TITLE RISK
2019-11-26 CVE-2018-20090 Incorrect Default Permissions vulnerability in Cloudera Data Science Workbench 1.4.0/1.4.1/1.4.2
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.
network
low complexity
cloudera CWE-276
8.3
2019-07-03 CVE-2018-11215 OS Command Injection vulnerability in Cloudera Data Science Workbench
Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.
network
low complexity
cloudera CWE-78
critical
9.8
2019-06-21 CVE-2018-15665 Information Exposure vulnerability in Cloudera Data Science Workbench
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0.
network
low complexity
cloudera CWE-200
5.3
2019-06-07 CVE-2018-20091 SQL Injection vulnerability in Cloudera Data Science Workbench 1.4.0/1.4.1/1.4.2
An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.
network
low complexity
cloudera CWE-89
critical
9.9
2018-02-05 CVE-2017-15536 Improper Privilege Management vulnerability in Cloudera Data Science Workbench
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0.
network
low complexity
cloudera CWE-269
8.8