Non notée
CVE-2018-1334 In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different…
Description
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Spark | 2.3.0 | Pas de correctif indiqué |
Références
- spark.apache.org spark.apache.org
- [dev] 20180711 CVE-2018-1334 Apache Spark local privilege escalation vulnerability lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Spark
Les 16 CVE de Apache Spark →
CVE-2026-32773
There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to…
Non notée
CVE-2025-54920
This issue affects Apache Spark: before 3.5.7 and 4.0.1
Non notée
CVE-2025-55039
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0
Non notée
CVE-2024-23945
Signing cookies is an application security feature that adds a digital signature to cookie data to verify its…
Non notée