PT-2020-20300 · Dataiku · Dataiku Dss

0Xfabiof + 1 · Published 2020-09-14 · Updated 2020-09-18 · CVE-2020-8817

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dataiku DSS versions prior to 6.0.5

Description The issue allows attackers to gain write access to a project, enabling them to modify the Created by metadata.

Recommendations For versions prior to 6.0.5, update to version 6.0.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-8817

Affected Products

Dataiku Dss

References · 4

• https://osv.dev/vulnerability/CVE-2020-8817 · Vendor Advisory
• https://doc.dataiku.com/dss/latest/security/advisories/cve-2020-8817.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8817 · Security Note
• https://doc.dataiku.com/dss/latest/release_notes/6.0.htm · Note