Rapid7’s Data-Centric Approach to AI in Belfast

Authored by Stuart Millar and Ryan Wilson. Rapid7 has expanded significantly in Belfast since establishing a presence back in 2014, resulting in the company's largest R&D hub outside the US with over 350 people spread across eight floors in our Chichester Street office. There is a wide range of...

CVE-2023-46674

An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue...

Deserialization of untrusted data

An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue...

CVE-2023-46674 Elasticsearch-hadoop Unsafe Deserialization

An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue...

CVE-2023-46674 Elasticsearch-hadoop Unsafe Deserialization

An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue...

CVE-2023-46674

CVE-2023-46674 applies to Elastic Elasticsearch-Hadoop, where unsafe deserialization of Java objects from Hadoop or Spark configuration properties that could be modified by an authenticated user enables arbitrary code execution on the target system. The issue is triggered when a local authenticat...

Elasticsearch-hadoop 7.17.11 / 8.9.0 Security Update (ESA-2023-28)

Elasticsearch-hadoop Unsafe Deserialization ESA-2023-28 An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon W...

Elasticsearch-hadoop Code Issue Vulnerability

Elasticsearch is a search engine based on the Lucene library. A security vulnerability exists in Elasticsearch-hadoop that stems from a deserialization vulnerability in java objects in hadoop or spark configuration properties. Affected products and versions: Elasticsearch-hadoop versions prior to...

PT-2023-30155 · Unknown · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users...

CVE-2023-46589 vulnerabilities

Vulnerabilities for packages: spark-compat, spark-compat-minimal...

Exploit for OS Command Injection in Apache Spark

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 202...

GHSA-RCJC-C4PJ-XXRP vulnerabilities

Vulnerabilities for packages: logstash-integration-jdbc, druid, hadoop-fips, spark-fips, spark...

GHSA-RCJC-C4PJ-XXRP vulnerabilities

Vulnerabilities for packages: logstash-integration-jdbc, druid, spark...

CVE-2022-46337 vulnerabilities

Vulnerabilities for packages: logstash-integration-jdbc, druid, spark...

CVE-2022-46337 vulnerabilities

Vulnerabilities for packages: logstash-integration-jdbc, druid, hadoop-fips, spark-fips, spark...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, nodetaint, spark-operator, kubernetes-dns-node-cache, prometheus-adapter, aws-efs-csi-driver, ip-masq-agent, aws-efs-csi-driver-fips...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, prometheus-adapter, ip-masq-agent, kubernetes-dns-node-cache, spark-operator...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, prometheus-adapter, ip-masq-agent, kubernetes-dns-node-cache, spark-operator...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, nodetaint, spark-operator, kubernetes-dns-node-cache, prometheus-adapter, aws-efs-csi-driver, ip-masq-agent, aws-efs-csi-driver-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, prometheus-blackbox-exporter, kubescape, smarter-device-manager-fips, kubeflow, src, prometheus-adapter-fips, timestamp-authority-fips, cortex, dynamic-localpv-provisioner-fips, k3d, conftest-fips, kiam, plutono-fips, aactl,...