CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3167
https://notcve.org/view.php?id=CVE-2021-3167
15 Mar 2021 — In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs. En Cloudera Data Engineering (CDE) versión1.3.0, los tokens de autenticación JWT son expuestos para administradores en los registros del servidor del clúster virtual • https://docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-26936
https://notcve.org/view.php?id=CVE-2020-26936
26 Nov 2020 — Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. Cloudera Data Engineering (CDE) versiones anteriores a 1.1, era vulnerable a un ataque de tipo CSRF • https://docs.cloudera.com/data-engineering/cloud/overview/topics/cde-service-overview.html • CWE-352: Cross-Site Request Forgery (CSRF) •