[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
Posted by disclosure via Fulldisclosure on Oct 060day Rubbish Research Team is publicly disclosing a vulnerability in
StreamSets Transf…
#hackernews #news
Posted by disclosure via Fulldisclosure on Oct 060day Rubbish Research Team is publicly disclosing a vulnerability in
StreamSets Transf…
#hackernews #news
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
Posted by disclosure via Fulldisclosure on Oct 060day Rubbish Research Team is publicly disclosing a vulnerability in
StreamSets Transformer, the Spark-engine data-pipeline platform from
StreamSets Inc. (subsequently acquired by IBM), verified on version 3.17.0
analysed from the official container image.
Type: failing-open authentication plus un-sandboxed code injection. On the
web tier, CWE-306 and CWE-1188 with CWE-285 on the authorisation side: when
the effective http.authentication value...
seclists.org
October 7, 2026 at 4:20 PM
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
Posted by disclosure via Fulldisclosure on Oct 060day Rubbish Research Team is publicly disclosing a vulnerability in
StreamSets Transf…
#hackernews #news
Posted by disclosure via Fulldisclosure on Oct 060day Rubbish Research Team is publicly disclosing a vulnerability in
StreamSets Transf…
#hackernews #news
StreamSets Transformer 3.17.0 Authentication Mode Code Execution https://packetstorm.news/files/234395 #exploit
October 6, 2026 at 10:51 PM
StreamSets Transformer 3.17.0 Authentication Mode Code Execution https://packetstorm.news/files/234395 #exploit
StreamSets DataCollector 6.4.1 Default Credentials / Command Execution https://packetstorm.news/files/230127 #exploit
August 31, 2026 at 9:29 PM
StreamSets DataCollector 6.4.1 Default Credentials / Command Execution https://packetstorm.news/files/230127 #exploit
Flashback to 2016 and my #StarWars / Twitter / @StreamSets / #Minecraft integration. I love my job! 😃 https://twitter.com/metadaddy/status/727878206058049536
November 18, 2024 at 11:22 PM
Flashback to 2016 and my #StarWars / Twitter / @StreamSets / #Minecraft integration. I love my job! 😃 https://twitter.com/metadaddy/status/727878206058049536
Five years since one of my most fun @StreamSets projects saw the light of day!
https://streamsets.com/blog/starwars-tweetoff/
https://streamsets.com/blog/starwars-tweetoff/
API Integration Platform | Software AG
Unlock innovation within your organization with seamless connections made possible by Software AG's API integration platform and microservices.
streamsets.com
November 18, 2024 at 6:52 PM
Five years since one of my most fun @StreamSets projects saw the light of day!
https://streamsets.com/blog/starwars-tweetoff/
https://streamsets.com/blog/starwars-tweetoff/
@GeePawHill Not microtests, but @dimaspivak built a test framework at @streamsets for testing data pipelines. Hook a pipeline together, feed it some data, assert that the output is as expected. It sometimes took longer to code the tests than add a feature, but MAN that thing rocks 1/2
November 18, 2024 at 6:50 PM
@GeePawHill Not microtests, but @dimaspivak built a test framework at @streamsets for testing data pipelines. Hook a pipeline together, feed it some data, assert that the output is as expected. It sometimes took longer to code the tests than add a feature, but MAN that thing rocks 1/2
. @StreamSets rates among the best big data companies to work for based on ratings at @Glassdoor, according to @LouisColumbus at @Forbes https://www.forbes.com/sites/louiscolumbus/2020/05/06/the-best-big-data-companies-to-work-for-based-on-glassdoor/
November 15, 2024 at 9:55 PM
. @StreamSets rates among the best big data companies to work for based on ratings at @Glassdoor, according to @LouisColumbus at @Forbes https://www.forbes.com/sites/louiscolumbus/2020/05/06/the-best-big-data-companies-to-work-for-based-on-glassdoor/
Sadly, we lost a member of the @StreamSets family yesterday. Larry Jeshiva, formerly our sales director for the Northeast US, succumbed to Covid 19 😔
Crazy how Suffolk County, MA, pop 800k, has had more cases and deaths than the entire state of North Carolina, pop 10.5M.
Crazy how Suffolk County, MA, pop 800k, has had more cases and deaths than the entire state of North Carolina, pop 10.5M.
November 15, 2024 at 9:55 PM
Sadly, we lost a member of the @StreamSets family yesterday. Larry Jeshiva, formerly our sales director for the Northeast US, succumbed to Covid 19 😔
Crazy how Suffolk County, MA, pop 800k, has had more cases and deaths than the entire state of North Carolina, pop 10.5M.
Crazy how Suffolk County, MA, pop 800k, has had more cases and deaths than the entire state of North Carolina, pop 10.5M.
Blog post coming soon! #marketo #dataengineering #datapipelines https://twitter.com/streamsets/status/1257706128097660929
November 15, 2024 at 9:55 PM
Blog post coming soon! #marketo #dataengineering #datapipelines https://twitter.com/streamsets/status/1257706128097660929
Here's how I was able to use StreamSets Data Collector's HTTP Client processor to create and update leads via the @Marketo REST API https://www.youtube.com/watch?v=QQNXDgnl62M #dataengineering #datapipelines #MarketingAutomation
November 15, 2024 at 9:55 PM
Here's how I was able to use StreamSets Data Collector's HTTP Client processor to create and update leads via the @Marketo REST API https://www.youtube.com/watch?v=QQNXDgnl62M #dataengineering #datapipelines #MarketingAutomation
I'm writing a blog post explaining how I created a data pipeline to read email addresses from MySQL and create leads in @Marketo. Does anyone here know anyone at Marketo that I could contact re having them repost it on their developer blog? https://www.youtube.com/watch?v=IBF0nZ0RPLk
Marketo Integration with MySQL Using StreamSets Data Collector
www.youtube.com
November 15, 2024 at 9:55 PM
I'm writing a blog post explaining how I created a data pipeline to read email addresses from MySQL and create leads in @Marketo. Does anyone here know anyone at Marketo that I could contact re having them repost it on their developer blog? https://www.youtube.com/watch?v=IBF0nZ0RPLk
Don't miss StreamSets VP of Pre-Sales, Greg Fields, and Head of Product Marketing, @SeanAndersonBD, explaining how #dataops can help businesses adapt to rapid change and disruption! https://twitter.com/streamsets/status/1256714594204123136
November 15, 2024 at 9:55 PM
Don't miss StreamSets VP of Pre-Sales, Greg Fields, and Head of Product Marketing, @SeanAndersonBD, explaining how #dataops can help businesses adapt to rapid change and disruption! https://twitter.com/streamsets/status/1256714594204123136
Marketo integration was an interesting one - they implement OAuth 2.0, but with a twist. API calls return 200, with the error in the body, when the access token expires, rather than the usual 401 https://twitter.com/streamsets/status/1257343739414171648
November 15, 2024 at 9:55 PM
Marketo integration was an interesting one - they implement OAuth 2.0, but with a twist. API calls return 200, with the error in the body, when the access token expires, rather than the usual 401 https://twitter.com/streamsets/status/1257343739414171648
Special guest star on the @StreamSets happy hour Zoom this afternoon, courtesy of @thesweetfarm
November 15, 2024 at 9:54 PM
Special guest star on the @StreamSets happy hour Zoom this afternoon, courtesy of @thesweetfarm
Great explanation of synchronizing live changes from Oracle Database to @SnowflakeDB from StreamSets platform evangelist @iamontheinet https://www.youtube.com/watch?v=r7kM83j4oCg #dataengineering #datapipelines
November 15, 2024 at 9:54 PM
Great explanation of synchronizing live changes from Oracle Database to @SnowflakeDB from StreamSets platform evangelist @iamontheinet https://www.youtube.com/watch?v=r7kM83j4oCg #dataengineering #datapipelines
This has been around a while, but it's still awesome - Principal Enterprise Architect @bur2chee of @Humana demonstrating @StreamSets Data Collector. I ❤️ our customers! https://www.youtube.com/watch?v=LNbRoguYOHU
November 15, 2024 at 9:54 PM
This has been around a while, but it's still awesome - Principal Enterprise Architect @bur2chee of @Humana demonstrating @StreamSets Data Collector. I ❤️ our customers! https://www.youtube.com/watch?v=LNbRoguYOHU
Don't miss 'Demos with Dash', the monthly @streamsets #dataops platform live demo webinar. What will you be showing us tomorrow, @iamontheinet? https://twitter.com/iamontheinet/status/1253790657501528064
November 15, 2024 at 9:54 PM
Don't miss 'Demos with Dash', the monthly @streamsets #dataops platform live demo webinar. What will you be showing us tomorrow, @iamontheinet? https://twitter.com/iamontheinet/status/1253790657501528064
One of the hats I wear is #dataengineering for the @streamsets product & marketing teams. Turns out this is a great source of real-world use cases. Took me a while to get these #datapipelines the way I wanted them, but I'm very pleased with the result. https://t.co/JGHa6dseoh
November 15, 2024 at 9:54 PM
One of the hats I wear is #dataengineering for the @streamsets product & marketing teams. Turns out this is a great source of real-world use cases. Took me a while to get these #datapipelines the way I wanted them, but I'm very pleased with the result. https://t.co/JGHa6dseoh
Nice example of sync'ing Oracle CDC to @SnowflakeDB https://twitter.com/streamsets/status/1253760214290980865
November 15, 2024 at 9:54 PM
Nice example of sync'ing Oracle CDC to @SnowflakeDB https://twitter.com/streamsets/status/1253760214290980865
Watch out for a blog post tying together these three minute videos next week - it's a really interesting use case! #DataEngineering #DataPipelines https://twitter.com/streamsets/status/1253357475375591427
November 15, 2024 at 9:53 PM
Watch out for a blog post tying together these three minute videos next week - it's a really interesting use case! #DataEngineering #DataPipelines https://twitter.com/streamsets/status/1253357475375591427
Script Evaluator - StreamSets Data Collector's heavy artillery - for when the #dataengineering problem doesn't respond to the off-the-shelf processors. #datapipelines https://twitter.com/streamsets/status/1253041893077811203
November 15, 2024 at 9:53 PM
Script Evaluator - StreamSets Data Collector's heavy artillery - for when the #dataengineering problem doesn't respond to the off-the-shelf processors. #datapipelines https://twitter.com/streamsets/status/1253041893077811203
Nice to see @StreamSets recognized by @insideBigData in their #impact50 list for Q2 2020 https://streamsets.com/blog/streamsets-named-in-insidebigdata-impact-50-list/
November 15, 2024 at 9:53 PM
Nice to see @StreamSets recognized by @insideBigData in their #impact50 list for Q2 2020 https://streamsets.com/blog/streamsets-named-in-insidebigdata-impact-50-list/
This CSV->MySQL pipeline is the gift that keeps giving - here, I explain StreamSets Data Collector's Stream Selector processor #StreamSetsSnack #DataPipelines #DataEngineering https://twitter.com/streamsets/status/1251204379706888192
November 15, 2024 at 9:53 PM
This CSV->MySQL pipeline is the gift that keeps giving - here, I explain StreamSets Data Collector's Stream Selector processor #StreamSetsSnack #DataPipelines #DataEngineering https://twitter.com/streamsets/status/1251204379706888192
StreamSets Data Collector has a LOT of knobs and levers to get your data into just the right shape. I'm making these #StreamSetsSnack videos to share some of my favorites https://t.co/MRqIh9Mz0m #DataPipelines #DataEngineering https://t.co/4HEXD6zDH7
StreamSets Snacks
www.youtube.com
November 15, 2024 at 9:53 PM
StreamSets Data Collector has a LOT of knobs and levers to get your data into just the right shape. I'm making these #StreamSetsSnack videos to share some of my favorites https://t.co/MRqIh9Mz0m #DataPipelines #DataEngineering https://t.co/4HEXD6zDH7
"Businesses running on data are vulnerable to #datadrift: the unexpected, unannounced and unending changes to data infrastructure that disrupt data flow" - @StreamSets CTO @aprabhakar explains the rise of the #DataOps mindset at @ForbesTech https://t.co/ffZFChXuqf
November 15, 2024 at 9:53 PM
"Businesses running on data are vulnerable to #datadrift: the unexpected, unannounced and unending changes to data infrastructure that disrupt data flow" - @StreamSets CTO @aprabhakar explains the rise of the #DataOps mindset at @ForbesTech https://t.co/ffZFChXuqf