Data Engineering
Cloudera · 2 CVEs
CVE-2021-3167
MEDIUM
In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster se…
Mar 15, 2021
CVE-2020-26936
HIGH
Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.
Nov 26, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2021-3167 | In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs. | MEDIUM | 1.15% | Mar 15, 2021 |
| CVE-2020-26936 | Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. | HIGH | 0.45% | Nov 26, 2020 |
Showing 1 to 2 of 2 CVEs