CVE-2021-27225 - CVE House
Back to Database
Status published Medium CVE-2021-27225

In Dataiku DSS before 8.0.6, insufficient access control in the...

Vulnerability Description

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-27225

Credits & Attribution

No credits recorded in the NVD database.

References

More from dataiku

View All →
CVE-2020-8817
Dataiku DSS before 6.0.5 allows attackers write access to the...
High 8.1
CVE-2018-10732
The REST API in Dataiku DSS before 4.2.3 allows remote...
Medium 5.3

Affected Vendor

Affected Software

data science studio
Vulnerable Versions:
0

Timeline

Official Publish: March 1st, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.