Archive
23 June 2020
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Critical 9.8
Improper Authentication in Apache Spark
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application…