CVE-2018-20090: Cloudera Data Science Workbench

High severity, CVSS 8.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.

Affected products

• Cloudera Data Science Workbench: from 1.4.0, up to and including 1.4.2

Published 2019-11-26. Last modified 2026-06-17.