Maven/org.apache.spark:spark-core_2.11 CVE-2018-11770: medium 4.2, EPSS 65.83%
org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | - | 2.3.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w4r4-65mg-45x2
- https://nvd.nist.gov/vuln/detail/CVE-2018-11770
- https://lists.apache.org/thread.html/bd8e51314041451a2acd720e9223fc1c15a263ccacb396a75b1fc485%40%3Cdev.spark.apache.org%3E
- https://lists.apache.org/thread.html/bd8e51314041451a2acd720e9223fc1c15a263ccacb396a75b1fc485@%3Cdev.spark.apache.org%3E
- https://spark.apache.org/security.html#CVE-2018-11770
- https://web.archive.org/web/20200227114942/http://www.securityfocus.com/bid/105097
CVE-2018-11770 · published · modified · JSON