PT-2022-3981

🗓️ 04 Aug 2022 00:00:00Reported by Positive TechnologiesType

Vulnerability in FileUtil.unTar allows command injection via unescaped file names in Hadoop and Spark usage.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities	13 Feb 202313:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Hadoop affect IBM watsonx.data	18 Sep 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Apache Hadoop	17 May 202321:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	7 Jun 202310:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Hadoop affect IBM Operations Analytics - Log Analysis (CVE-2022-26612, CVE-2022-25168)	22 Nov 202212:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Scale (GPFS) Hadoop connector is affected by a security vulnerability (CVE-2022-25168)	5 Dec 202210:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	15 Dec 202203:09	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/GHSA-8wm5-8h9c-47pc
t	www.t.me/cibsecurity/47559
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37404
osv	www.osv.dev/vulnerability/CVE-2022-25168
lists	www.lists.apache.org/thread/mxqnb39jfrwgs3j6phwvlrfq4mlox130
security	www.security.netapp.com/advisory/ntap-20220915-0007
twitter	www.twitter.com/Loginsoft_Intel/status/2006010019641528664
t	www.t.me/pentestingnews/26553
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25168
bdu	www.bdu.fstec.ru/vul/2022-04814

30 Dec 2025 00:00Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5 - 10

CVSS 3.19.8

EPSS0.03008