CVE-2018-11760
04.02.2019, 17:29
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | spark | 1.0.2 ≤ 𝑥 ≤ 1.6.3 |
| apache | spark | 2.0.0 ≤ 𝑥 ≤ 2.0.2 |
| apache | spark | 2.1.0 ≤ 𝑥 ≤ 2.1.3 |
| apache | spark | 2.2.0 ≤ 𝑥 ≤ 2.2.2 |
| apache | spark | 2.3.0 ≤ 𝑥 ≤ 2.3.1 |
𝑥
= Vulnerable software versions
References