CVE-2018-1334

2018-07-1100:00:00

apache

www.cve.org

AI Score

4.7

Confidence

High

EPSS

Percentile

5.1%

JSON

In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it’s possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.

CNA Affected

[
  {
    "product": "Apache Spark",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0 to 2.1.2"
      },
      {
        "status": "affected",
        "version": "2.2.0 to 2.2.1"
      },
      {
        "status": "affected",
        "version": "2.3.0"
      }
    ]
  }
]