Elasticsearch-hadoop Code Issue Vulnerability

Elasticsearch is a search engine based on the Lucene library. A security vulnerability exists in Elasticsearch-hadoop that stems from a deserialization vulnerability in java objects in hadoop or spark configuration properties. Affected products and versions: Elasticsearch-hadoop versions prior to...

PT-2023-30155 · Unknown · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users...

CVE-2023-46589 vulnerabilities

Vulnerabilities for packages: spark-compat, spark-compat-minimal...

Exploit for OS Command Injection in Apache Spark

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 202...

GHSA-RCJC-C4PJ-XXRP vulnerabilities

Vulnerabilities for packages: logstash-integration-jdbc, spark, spark-fips, hadoop-fips, druid...

GHSA-RCJC-C4PJ-XXRP vulnerabilities

Vulnerabilities for packages: spark, druid, logstash-integration-jdbc...

CVE-2022-46337 vulnerabilities

Vulnerabilities for packages: spark, druid, logstash-integration-jdbc...

CVE-2022-46337 vulnerabilities

Vulnerabilities for packages: logstash-integration-jdbc, spark, spark-fips, hadoop-fips, druid...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, spark-operator, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, nodetaint, aws-ebs-csi-driver...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, ip-masq-agent, spark-operator, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, ip-masq-agent, spark-operator, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, spark-operator, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, nodetaint, aws-ebs-csi-driver...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, bank-vaults-fips, kubernetes-csi-livenessprobe-fips, metrics-server-fips, terraform-provider-sendgrid, up, slsa-verifier, aws-efs-csi-driver-fips, cortex, prometheus-blackbox-exporter, kubescape, kube-oidc-proxy, smarter-device-manager-fips, plutono-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubescape, k3d, dgraph, kubeflow, slsa-verifier, up, scorecard, terraform-provider-sendgrid, aactl, cortex, spark-operator, kubevela, src, buildkitd...

Oracle Business Intelligence Enterprise Edition (OAS 6.4) (October 2023 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 6.4.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2023 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product...

PT-2023-9835 · Apache · Apache Spark +1

Name of the Vulnerable Software and Affected Versions: Apache Hive versions 1.2.0 and later Apache Spark versions 2.0.0 and later Description: The issue is related to the exposure of digital signatures in cookie data, which can lead to security vulnerabilities and exploitation. The vulnerable...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, azure-aad-pod-identity-mic, aws-efs-csi-driver-fips, caddy, prometheus-bind-exporter, memcached-exporter, smarter-device-manager-fips, kubeflow-fips, prometheus-node-exporter-fips, secrets-store-csi-driver-provider-gcp, k3d, falcoct...

Security Bulletin: IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities.

Summary IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-32007 DESCRIPTION: Apache Spark could allow a remote authenticated attacker to execute arbitrary commands on the...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-stable, aws-efs-csi-driver, flux-notification-controller, kubescape, ollama, metacontroller, dex, gobuster, kubeflow-katib, nri-prometheus, spark-operator, minio, kaf, wireguard-go, memcached-exporter, slsa-verifier, rqlite, src, kubewatch, frp,...

Apache Spark < 3.4.0 Privilege Escalation (CVE-2023-22946)

In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges. The application can execute code with the privileges of the submitting user, however, by providing malicious configuration-related classes on the classpath. This...