Lucene search
Redhat.comRH:CVE-2022-33891HistoryMar 01, 2023 - 2:29 a.m.
CVE-2022-33891
2023-03-0102:29:19
redhat.com
access.redhat.com
36
apache spark
user impersonation
shell commands
security flaw
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.973
Percentile
99.9%
A flaw was found in Apache Spark. This flaw allows a malicious user to impersonate another user and jeopardize the environment by executing shell commands.
Related
githubexploit
githubexploit
Exploit for OS Command Injection in Apache Spark
2022-07-30 23:02:16
Exploit for OS Command Injection in Apache Spark
2022-07-24 07:45:46
Exploit for OS Command Injection in Apache Spark
2022-07-20 22:52:43
hivepro
hivepro
Shell Command Injection Vulnerability found in Apache Spark
2022-07-28 05:58:41
packetstorm
packetstorm
Apache Spark Unauthenticated Command Injection
2022-09-08 00:00:00
osv
osv
PYSEC-2022-236
2022-07-18 07:15:00
BIT-spark-2022-33891
2024-03-06 11:05:29
Apache Spark UI can allow impersonation if ACLs enabled
2022-07-19 00:00:29
cisa_kev
cisa_kev
Apache Spark Command Injection Vulnerability
2023-03-07 00:00:00
nuclei
nuclei
Apache Spark UI - Remote Command Injection
2022-07-19 05:04:39
metasploit
metasploit
Apache Spark Unauthenticated Command Injection RCE
2022-08-25 17:54:53
zdt
zdt
Apache Spark Unauthenticated Command Injection Exploit
2022-09-08 00:00:00
cve
cve
CVE-2022-33891
2022-07-18 07:15:07
CVE-2023-32007
2023-05-02 09:15:10
github
github
Apache Spark UI can allow impersonation if ACLs enabled
2022-07-19 00:00:29
Apache Spark UI vulnerable to Command Injection
2023-05-02 09:30:17
checkpoint_advisories
checkpoint_advisories
Apache Spark UI Command Injection (CVE-2022-33891)
2022-11-06 00:00:00
prion
prion
Command injection
2022-07-18 07:15:00
Command injection
2023-05-02 09:15:00
f5
f5
K33828251 : Apache Spark vulnerability CVE-2022-33891
2022-07-20 00:00:00
veracode
veracode
OS Command Injection
2022-07-18 10:43:57
cvelist
cvelist
CVE-2023-32007 Apache Spark: Shell command injection via Spark UI
2023-05-02 08:37:22
nvd
nvd
CVE-2022-33891
2022-07-18 07:15:07
CVE-2023-32007
2023-05-02 09:15:10
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-09-09 19:43:42
2022 Annual Metasploit Wrap-Up
2022-12-30 15:00:00
nessus
nessus
Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)
2023-03-27 00:00:00
Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)
2023-03-10 00:00:00
attackerkb
attackerkb
CVE-2022-33891
2022-07-18 00:00:00
thn
thn
qualysblog
qualysblog
Identify Server-Side Attacks Using Qualys Periscope
2022-12-01 23:11:35
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-30 15:19:31
mssecure
mssecure
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
mmpc
mmpc
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.973
Percentile
99.9%
Related for RH:CVE-2022-33891