{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.0.0","last_affected":"2.3.2"}],"component":"org.apache.spark:spark-core_2.11","cve_ids":["CVE-2018-11770"],"ecosystem":"Maven","epss":0.6583,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w4r4-65mg-45x2","id":"tcs_01M5N9FHP65ANA71N052Z78F98","modified_at":"2024-06-10T21:45:44.697077Z","published_at":"2018-11-09T17:41:46Z","references":["https://osv.dev/vulnerability/GHSA-w4r4-65mg-45x2","https://nvd.nist.gov/vuln/detail/CVE-2018-11770","https://lists.apache.org/thread.html/bd8e51314041451a2acd720e9223fc1c15a263ccacb396a75b1fc485%40%3Cdev.spark.apache.org%3E","https://lists.apache.org/thread.html/bd8e51314041451a2acd720e9223fc1c15a263ccacb396a75b1fc485@%3Cdev.spark.apache.org%3E","https://spark.apache.org/security.html#CVE-2018-11770","https://web.archive.org/web/20200227114942/http://www.securityfocus.com/bid/105097"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-w4r4-65mg-45x2","url":"https://osv.dev/vulnerability/GHSA-w4r4-65mg-45x2"}],"summary":"org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability"}