{"metadata": {"vulnerability": "CVE-2021-38296", "count": 30, "kinds": {"milestone": 11, "sighting": 1, "kev": 0, "other": 18}}, "data": [{"timestamp": "2021-08-09T00:00:00Z", "date_only": false, "value": "2021-08-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-38296", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-10T00:00:00Z", "date_only": true, "value": "2022-03-10", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-38296", "record": "GSD-2021-38296", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-03-10T08:20:12Z", "date_only": false, "value": "2022-03-10T08:20:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38296", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-03-10T09:15:00Z", "date_only": false, "value": "2022-03-10T09:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9RR6-JPG7-9JG6", "record": "GHSA-9RR6-JPG7-9JG6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-03-10T09:15:00Z", "date_only": false, "value": "2022-03-10T09:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2022-186", "record": "PYSEC-2022-186", "field": "published"}, {"timestamp": "2022-03-10T09:15:00Z", "date_only": false, "value": "2022-03-10T09:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-38296", "record": "GSD-2021-38296", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-03-10T09:15:07Z", "date_only": false, "value": "2022-03-10T09:15:07.000", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38296", "record": "FKIE_CVE-2021-38296", "field": "published"}, {"timestamp": "2022-03-10T12:12:32Z", "date_only": false, "value": "2022-03-10T12:12:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/38633", "record": "CVE-2021-38296", "field": "creation_timestamp", "uuid": "dc6ee7be-1223-433a-8f92-6fd3ac522e41", "content": "\u203c CVE-2021-38296 \u203c\n\nApache Spark supports end-to-end encryption of RPC connections via \"spark.authenticate\" and \"spark.network.crypto.enabled\". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an initial interactive attack, this would allow someone to decrypt plaintext traffic offline. Note that this does not affect security mechanisms controlled by \"spark.authenticate.enableSaslEncryption\", \"spark.io.encryption.enabled\", \"spark.ssl\", \"spark.ui.strictTransportSecurity\". Update to Apache Spark 3.1.3 or later\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/38633"}, {"timestamp": "2022-03-11T00:00:00Z", "date_only": true, "value": "2022-03-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-21823", "record": "CNVD-2022-21823", "field": "submitTime"}, {"timestamp": "2022-03-11T00:02:36Z", "date_only": false, "value": "2022-03-11T00:02:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9RR6-JPG7-9JG6", "record": "GHSA-9RR6-JPG7-9JG6", "field": "published"}, {"timestamp": "2022-03-23T00:00:00Z", "date_only": true, "value": "2022-03-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-21823", "record": "CNVD-2022-21823", "field": "openTime"}, {"timestamp": "2022-03-26T11:04:52Z", "date_only": false, "value": "2022-03-26T11:04:52Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-1591", "record": "OESA-2022-1591", "field": "published"}, {"timestamp": "2022-05-17T21:40:53.336Z", "date_only": false, "value": "2022-05-17T21:40:53.336457Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2022-186", "record": "PYSEC-2022-186", "field": "modified"}, {"timestamp": "2022-07-25T16:31:48Z", "date_only": false, "value": "2022-07-25T16:31:48.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2021-38296", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-09T00:00:00Z", "date_only": true, "value": "2023-02-09", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-38296", "record": "GSD-2021-38296", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-02-09T02:02:00Z", "date_only": false, "value": "2023-02-09T02:02Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-38296", "record": "GSD-2021-38296", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:17.706Z", "date_only": false, "value": "2023-12-13T01:23:17.706863Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-38296", "record": "GSD-2021-38296", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:05:47.504Z", "date_only": false, "value": "2024-03-06T11:05:47.504Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-SPARK-2021-38296", "record": "BIT-SPARK-2021-38296", "field": "published"}, {"timestamp": "2024-08-04T01:37:16.315Z", "date_only": false, "value": "2024-08-04T01:37:16.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-38296", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T01:37:16.315Z", "date_only": false, "value": "2024-08-04T01:37:16.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-38296", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-25T20:49:39Z", "date_only": false, "value": "2024-10-25T20:49:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9RR6-JPG7-9JG6", "record": "GHSA-9RR6-JPG7-9JG6", "field": "modified"}, {"timestamp": "2026-06-17T04:01:49.240Z", "date_only": false, "value": "2026-06-17T04:01:49.240", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38296", "record": "FKIE_CVE-2021-38296", "field": "lastModified"}, {"timestamp": "2026-08-06T11:04:52Z", "date_only": false, "value": "2026-08-06T11:04:52Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-1591", "record": "OESA-2022-1591", "field": "modified"}, {"timestamp": "2026-09-07T00:00:00Z", "date_only": true, "value": "2026-09-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-SPARK-2021-38296", "record": "BIT-SPARK-2021-38296", "field": "modified"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": true, "value": "2026-09-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "last_revision_date"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "revisions.0.revision_date"}]}