Lucene search
GoogleOSV:PYSEC-2019-169HistoryFeb 04, 2019 - 5:29 p.m.
PYSEC-2019-169
2019-02-0417:29:00
Google
osv.dev
13
EPSS
0
Percentile
5.1%
When using PySpark , it’s possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.
References
www.securityfocus.com/bid/106786
github.com/advisories/GHSA-fvxv-9xxr-h7wj
lists.apache.org/thread.html/6d015e56b3a3da968f86e0b6acc69f17ecc16b499389e12d8255bf6e@%3Ccommits.spark.apache.org%3E
lists.apache.org/thread.html/a86ee93d07b6f61b82b61a28049aed311f5cc9420d26cc95f1a9de7b@%3Cuser.spark.apache.org%3E
Related
cvelist
cvelist
CVE-2018-11760
2019-02-04 17:00:00
ibm
ibm
prion
prion
Code injection
2019-02-04 17:29:00
osv
osv
CVE-2018-11760
2019-02-04 17:29:00
Pyspark User Impersonation Vulnerability
2019-02-07 18:02:21
github
github
Pyspark User Impersonation Vulnerability
2019-02-07 18:02:21
redhatcve
redhatcve
CVE-2018-11760
2019-02-05 12:19:21
veracode
veracode
Privilege Escalation
2019-01-30 04:06:01
nvd
nvd
CVE-2018-11760
2019-02-04 17:29:00
cve
cve
CVE-2018-11760
2019-02-04 17:29:00