Sensitive Information Disclosure in Dataiku DSS REST API

CVE-2018-10732 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pictures visibility.

Learn more about our Api Penetration Testing.