Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-1926

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-54g4-5cf6-hjp3

Apache Hive Information Exposure and Observable Timing Discrepancy Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8

gitlab/maven/org.apache.hive/hive/CVE-2020-1926

Information Exposure Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive

gitlab/maven/org.apache.hive/hive-service/CVE-2020-1926

Information Exposure Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive