CVE-2020-9480

Description

In Apache Spark 2.4.5 and earlier, a standalone resource managers master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an applications resources on the Spark cluster, even without the shared key. This can be leveraged to execute shell commands on the host machine. This does not affect Spark clusters using other resource managers (YARN, Mesos, etc).

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

93.3

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-9480 are fixed in Apache-spark-parent_2.11 2.4.6	Windows
Vulnerabilities CVE-2020-9480 are fixed in Python-pyspark 2.4.6	Windows
Vulnerabilities CVE-2020-9480 are fixed in Apache-spark-parent_2.11 for Linux 2.4.6	Linux
Vulnerabilities CVE-2020-9480 are fixed in Python-pyspark for linux 2.4.6	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234