CVE-2018-11760

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application

published February 4, 2019

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Published
2019-02-04T17:00Z
EPSS history
Timeline
  • 04 FEB 17:00Z
    When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application
    cvelistv5