300 matches found
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application...
eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) potentially affected by CVE-2018-1334 via pyspark (2.1.2)
pyspark PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2018-1334 Source advisory: GHSA-6MQQ-8R44-VMJC...
sourced-ml (0.4.5) potentially affected by CVE-2018-1334 via pyspark (2.2.0.post0)
pyspark PYPI version 2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml 0.4.5 Source cves: CVE-2018-1334 Source advisory: GHSA-6MQQ-8R44-VMJC...
sourced-ml (0.4.5) potentially affected by CVE-2018-1334 via pyspark (2.2.0.post0)
pyspark PYPI version 2.2.0.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - sourced-ml 0.4.5 Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...
eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) potentially affected by CVE-2018-1334 via pyspark (2.1.2)
pyspark PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2018-1334 Source advisory: OSV:GHSA-6MQQ-8R44-VMJC...
eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)
pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: OSV:GHSA-FVXV-9XXR-H7WJ...
eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)
pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: GHSA-FVXV-9XXR-H7WJ...
azureml-webservice-schema (>=0.1.57, <=1.0.33), intake-hive (0.1.0) +3 more potentially affected by CVE-2018-11760 via pyspark (>=2.3.0, <=2.3.1)
pyspark PYPI version =2.3.0, =0.1.57, =2.0.3, =0.2.0, =0.2.4 Source cves: CVE-2018-11760 Source advisory: OSV:GHSA-FVXV-9XXR-H7WJ...
azureml-webservice-schema (>=0.1.57, <=1.0.33), intake-hive (0.1.0) +3 more potentially affected by CVE-2018-11760 via pyspark (>=2.3.0, <=2.3.1)
pyspark PYPI version =2.3.0, =0.1.57, =2.0.3, =0.2.0, =0.2.4 Source cves: CVE-2018-11760 Source advisory: GHSA-FVXV-9XXR-H7WJ...
Pyspark User Impersonation Vulnerability
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
CVE-2018-11760
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)
pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: OSV:PYSEC-2019-169...
azureml-webservice-schema (>=0.1.57, <=1.0.33), intake-hive (0.1.0) +3 more potentially affected by CVE-2018-11760 via pyspark (>=2.3.0, <=2.3.1)
pyspark PYPI version =2.3.0, =0.1.57, =2.0.3, =0.2.0, =0.2.4 Source cves: CVE-2018-11760 Source advisory: OSV:PYSEC-2019-169...
CVE-2018-11760
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
Code injection
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
CVE-2018-11760
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
PYSEC-2019-169
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
PYSEC-2019-169
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) +1 more potentially affected by CVE-2018-11760 via pyspark (>=2.1.2, <=2.2.0.post0)
pyspark PYPI version =2.1.2, =0.8.0, =1.0.0rc2, =1.0.1 - sourced-ml 0.4.5 Source cves: CVE-2018-11760 Source advisory: MEND:CVE-2018-11760...
azureml-webservice-schema (>=0.1.57, <=1.0.33), intake-hive (0.1.0) +3 more potentially affected by CVE-2018-11760 via pyspark (>=2.3.0, <=2.3.1)
pyspark PYPI version =2.3.0, =0.1.57, =2.0.3, =0.2.0, =0.2.4 Source cves: CVE-2018-11760 Source advisory: MEND:CVE-2018-11760...