Lucene search
+L

1 matches found

OSV
OSV
added 2018/11/09 5:41 p.m.82 views

GHSA-W4R4-65MG-45X2 org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...

4.2CVSS7.1AI score0.6583EPSS
SaveExploits2References5
Rows per page
Query Builder