Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:36389
HistoryJul 18, 2022 - 10:43 a.m.

OS Command Injection

2022-07-1810:43:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
68
apache spark
os command injection
unix shell command

EPSS

0.973

Percentile

99.9%

JSON

Apache Spark is vulnerable to OS command injection. The vulnerability exists it is possible to impersonate using an arbitrary user name if ACL is enabled, allowing an attacker to provide malicious input to build and execute a Unix shell command arbitrarily.

Related

githubexploit 10
hivepro 1
packetstorm 1
osv 8
cisa_kev 1
nuclei 1
zdt 1
metasploit 1
cve 2
github 2
checkpoint_advisories 1
redhatcve 1
prion 2
f5 1
cvelist 2
nvd 2
rapid7blog 2
nessus 2
attackerkb 1
thn 2
qualysblog 1
ibm 1
mssecure 1
mmpc 1
githubexploit
githubexploit
Exploit for OS Command Injection in Apache Spark
2022-07-30 23:02:16
Exploit for OS Command Injection in Apache Spark
2022-07-24 07:45:46
Exploit for OS Command Injection in Apache Spark
2022-07-20 22:52:43
hivepro
hivepro
Shell Command Injection Vulnerability found in Apache Spark
2022-07-28 05:58:41
packetstorm
packetstorm
Apache Spark Unauthenticated Command Injection
2022-09-08 00:00:00
osv
osv
PYSEC-2022-236
2022-07-18 07:15:00
BIT-spark-2022-33891
2024-03-06 11:05:29
Apache Spark UI can allow impersonation if ACLs enabled
2022-07-19 00:00:29
cisa_kev
cisa_kev
Apache Spark Command Injection Vulnerability
2023-03-07 00:00:00
nuclei
nuclei
Apache Spark UI - Remote Command Injection
2022-07-19 05:04:39
zdt
zdt
Apache Spark Unauthenticated Command Injection Exploit
2022-09-08 00:00:00
metasploit
metasploit
Apache Spark Unauthenticated Command Injection RCE
2022-08-25 17:54:53
cve
cve
CVE-2022-33891
2022-07-18 07:15:07
CVE-2023-32007
2023-05-02 09:15:10
github
github
Apache Spark UI can allow impersonation if ACLs enabled
2022-07-19 00:00:29
Apache Spark UI vulnerable to Command Injection
2023-05-02 09:30:17
checkpoint_advisories
checkpoint_advisories
Apache Spark UI Command Injection (CVE-2022-33891)
2022-11-06 00:00:00
redhatcve
redhatcve
CVE-2022-33891
2023-03-01 02:29:19
prion
prion
Command injection
2022-07-18 07:15:00
Command injection
2023-05-02 09:15:00
f5
f5
K33828251 : Apache Spark vulnerability CVE-2022-33891
2022-07-20 00:00:00
cvelist
cvelist
CVE-2022-33891 Apache Spark shell command injection vulnerability via Spark UI
2022-07-18 00:00:00
CVE-2023-32007 Apache Spark: Shell command injection via Spark UI
2023-05-02 08:37:22
nvd
nvd
CVE-2022-33891
2022-07-18 07:15:07
CVE-2023-32007
2023-05-02 09:15:10
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-09-09 19:43:42
2022 Annual Metasploit Wrap-Up
2022-12-30 15:00:00
nessus
nessus
Apache Spark <= 3.0.3 / 3.1.x > 3.1.1 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)
2023-03-27 00:00:00
Apache Spark <= 3.0.3 / 3.1.1 < 3.1.3 / 3.2.x < 3.2.1 RCE (CVE-2022-33891)
2023-03-10 00:00:00
attackerkb
attackerkb
CVE-2022-33891
2022-07-18 00:00:00
thn
thn
CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems
2023-03-08 06:30:00
Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities
2022-12-22 09:39:00
qualysblog
qualysblog
Identify Server-Side Attacks Using Qualys Periscope
2022-12-01 23:11:35
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-30 15:19:31
mssecure
mssecure
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
mmpc
mmpc
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00

EPSS

0.973

Percentile

99.9%

JSON
Related for VERACODE:36389
githubexploit10hivepro1packetstorm1osv8cisa_kev1nuclei1zdt1metasploit1cve2github2checkpoint_advisories1redhatcve1prion2f51cvelist2nvd2rapid7blog2nessus2attackerkb1thn2qualysblog1ibm1mssecure1mmpc1