CVE-2022-33891
highPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.932 · 100. PerzentilExploit · waffenfähigEURUUShinzugefügt 2023-03-07beheben bis 2023-03-28
erforderliche Maßnahme Apply updates per vendor instructions.
EPSS · bewertet 2026-10-27
Apache Spark Command Injection Vulnerability
The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (11)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- AkbarTrilaksana/cve-2022-33891AkbarTrilaksana/cve-2022-33891PoC · poc_in_github
- AmoloHT/CVE-2022-33891「💥」CVE-2022-33891 - Apache Spark Command InjectionPoC · poc_in_github
- DrLinuxOfficial/CVE-2022-33891CVE-2022-33891 Exploit For Apache SparkPoC · poc_in_github
- HuskyHacks/cve-2022-33891Apache Spark Shell Command Injection VulnerabilityPoC · poc_in_github
- Vulnmachines/Apache-spark-CVE-2022-33891Apache Spark RCE - CVE-2022-33891PoC · poc_in_github
betroffene Produkte (16)
Betroffene Produkte und Versionsbereiche.
- Maven org.apache.spark:spark-parent_2.123.1.1 → 3.2.2osvUSpkg:maven/org.apache.spark/spark-parent_2.12
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-4x9r-j582-cgr8Apache Spark UI can allow impersonation if ACLs enabled2022-07-19ghsa · osvUS
The Apache Spark UI offers the possibility to enable ACLs via the configuration option `spark.acls.enable`. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1. A previous version of this advisory incorrectly stated that version 3.1.3 was not vulnerable. Per [GHSA-59hw-j9g6-mfg3](https://github.com/advisories/GHSA-59hw-j9g6-mfg3), version 3.1.3 is vulnerable and vulnerable version ranges in this advisory have been changed to reflect the correct information.
- BIT-spark-2022-33891Apache Spark shell command injection vulnerability via Spark UI2024-03-06vendor · osvUS
The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1.
- PYSEC-2022-2362022-07-18vendor · osvUS
The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1.
auch bekannt als (8)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (12)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2023/05/02/1cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-33891/cnnvd
- https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlccnnvd
- https://packetstormsecurity.com/files/168309/Apache-Spark-Unauthenticated-Command-Injection.htmlcnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022071809cnnvd
- http://packetstormsecurity.com/files/168309/Apache-Spark-Unauthenticated-Command-Injection.htmlenisa_euvd
- http://www.openwall.com/lists/oss-security/2023/05/02/1enisa_euvd
- https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlcenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan