high8.3
CVE-2018-20090
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.
Impact
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudera | Data Science Workbench | from 1.4.0 through 1.4.2 |