Security Advisory

CVE-2018-11760

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-02-04 17:00:00
Last updated 2024-09-16 19:19:24
Assigner apache
State PUBLISHED

Description

When using PySpark , its possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.