Data Science Studio
CVE-2020-8817
HIGH
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
1DescriptionNVD
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.
AnalysisAI
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata. Affected products include: Dataiku Data Science Studio. Version information: before 6.0.5.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Data Science Studio
View allIn Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specify
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass. Rated
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have cod
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a u
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today