Product · Apache Software Foundation

Apache Spark

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2020-9480 Public exploit EPSS 30%

Improper Authentication in Apache Spark

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application…

Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.11 Maven PyPI

Jun 23, 2020