Non notée
CVE-2018-11760 When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the…
Description
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Spark | Versions non publiées |
Références
- 106786 www.securityfocus.com
- [user@spark.apache.org] 20190128 [SECURITY] CVE-2018-11760: Apache Spark local privilege escalation vulnerability lists.apache.org
- [spark-commits] 20190806 [spark-website] branch asf-site updated: CVE-2019-10099 lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Spark
Les 16 CVE de Apache Spark →
CVE-2026-32773
There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to…
Non notée
CVE-2025-54920
This issue affects Apache Spark: before 3.5.7 and 4.0.1
Non notée
CVE-2025-55039
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0
Non notée
CVE-2024-23945
Signing cookies is an application security feature that adds a digital signature to cookie data to verify its…
Non notée