Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain access to the CDSW database which includes Kerberos keytabs of CDSW users and bcrypt hashed passwords, and gain access to other privileged information such as session tokens, invitation tokens, and environment variables.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cloudera Data Science Workbench 安全漏洞
Vulnerability Description
Cloudera Data Science Workbench（CDSW）是美国Cloudera公司的一套数据科学平台。该平台为企业提供快速、简易且安全的自助式数据科学支持。 CDSW 1.2.0之前1.x版本中存在安全漏洞。攻击者可利用该漏洞提升权限，获取CDSW节点、数据库和其他特权信息（例如：会话令牌和环境变量）。
CVSS Information
N/A
Vulnerability Type
N/A