readdle spark CVE-2021-38296 vulnerability in Readdle and Other Products
Published on March 10, 2022

Apache Spark Key Negotiation Vulnerability

product logo product logo product logo
Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an initial interactive attack, this would allow someone to decrypt plaintext traffic offline. Note that this does not affect security mechanisms controlled by "spark.authenticate.enableSaslEncryption", "spark.io.encryption.enabled", "spark.ssl", "spark.ui.strictTransportSecurity". Update to Apache Spark 3.1.3 or later

NVD

Weakness Type

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the software makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes). Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.


Products Associated with CVE-2021-38296

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-38296 are published in these products:

Readdle Spark
 
Apache Spark
 
Oracle Financial Services Crime Compliance Management Studio
 

Affected Versions

Apache Software Foundation Apache Spark:

Exploit Probability

EPSS
0.85%
Percentile
74.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.