EPSS
Percentile
5.1%
spark-core is vulnerable to privilege escalation. The application does not implement the SparkR communication protocol properly, allowing a malicious user with local access the ability to impersonate another user running the application.
github.com/apache/spark/commit/16cd9ac5264831e061c033b26fe1173ebc88e5d1
lists.apache.org/thread.html/4d6d210e319a501b740293daaeeeadb51927111fb8261a3e4cd60060@%3Cdev.spark.apache.org%3E
spark.apache.org/security.html#CVE-2018-1334