Spark CVE-2016-1323

The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. Rated high sev

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (s

An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. Rated high severity (CVS

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. Rated high sever

From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the su

Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authentici

In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting

In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then r

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointin

** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option s

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. Rate

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create a