CVE-2018-15665

概要

参考情報

• cloudera.com · Vendor Advisory
• cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html · Vendor Advisory

data science workbench のその他の脆弱性

• CVE-2018-20090高 8.3An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission che…
• CVE-2018-11215緊急 9.8Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.
• CVE-2018-20091緊急 9.9An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated u…
• CVE-2017-15536高 8.8An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious …