REDHAT-BUG-1393607: Path Traversal
A path traversal issue was found in Spark version 2.5 and potentially earlier versions. The vulnerability resides in the functionality to serve static files where there's no protection against directory traversal attacks. This could allow attackers access to private files including sensitive data.
External References:
http://seclists.org/fulldisclosure/2016/Nov/13
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1393607?
The severity of REDHAT-BUG-1393607 is considered high due to the potential exposure of sensitive data through directory traversal attacks.
How do I fix REDHAT-BUG-1393607?
To fix REDHAT-BUG-1393607, upgrade to the latest version of Apache Spark that addresses this vulnerability.
What versions of Apache Spark are affected by REDHAT-BUG-1393607?
REDHAT-BUG-1393607 affects Apache Spark version 2.5 and potentially earlier versions.
What type of vulnerability is REDHAT-BUG-1393607?
REDHAT-BUG-1393607 is a path traversal vulnerability that allows unauthorized access to files on the server.
What could be the consequences of exploiting REDHAT-BUG-1393607?
Exploiting REDHAT-BUG-1393607 could lead to unauthorized access to private files, potentially exposing sensitive information.