GHSA-fvxv-9xxr-h7wjMediumCVSS 5.5

Pyspark User Impersonation Vulnerability

Published
February 7, 2019
Last Modified
October 24, 2024

🔗 CVE IDs covered (1)

CVE-2018-11760 →

📋 Description

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.

🎯 Affected products2

  • pip/pyspark:>= 2.3.0, < 2.3.2
  • pip/pyspark:>= 1.0.2, < 2.2.3

🔗 References (7)