AEGLIX vulnerability intelligence
CVE-2022-33891
HIGH · CVSS 8.8 · Analyzed
Published: 2022-07-18 · Updated: 2026-06-17 · Source: NVD
Vulnerability overview
The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1.
Severity and scoring
- CVSS score
- 8.8 · HIGH
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- Apache · Spark
- Added to catalog
- 2023-03-07
- Required action
- Apply updates per vendor instructions.
- CISA remediation due date
- 2023-03-28
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*
Through (inclusive): 3.0.3
cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*
From (inclusive): 3.1.1
Through (inclusive): 3.1.2
cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*
From (inclusive): 3.2.0
Through (inclusive): 3.2.1
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- http://packetstormsecurity.com/files/168309/Apache-Spark-Unauthenticated-Command-Injection.html
Exploit · Third Party Advisory · VDB Entry
- http://www.openwall.com/lists/oss-security/2023/05/02/1
Mailing List · Third Party Advisory
- https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc
Mailing List · Third Party Advisory
- http://packetstormsecurity.com/files/168309/Apache-Spark-Unauthenticated-Command-Injection.html
Exploit · Third Party Advisory · VDB Entry
- http://www.openwall.com/lists/oss-security/2023/05/02/1
Mailing List · Third Party Advisory
- https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc
Mailing List · Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-33891
Third Party Advisory · US Government Resource