{"url":"http://public2.vulnerablecode.io/api/packages/434218?format=json","purl":"pkg:maven/org.apache.hive/hive-exec@1.2.0","type":"maven","namespace":"org.apache.hive","name":"hive-exec","version":"1.2.0","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"4.0.1","latest_non_vulnerable_version":"4.0.1","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/30465?format=json","vulnerability_id":"VCID-eq5d-6k2k-euas","summary":"","references":[{"reference_url":"http://mail-archives.apache.org/mod_mbox/hive-user/201601.mbox/%3C20160128205008.2154F185EB%40minotaur.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"8.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://mail-archives.apache.org/mod_mbox/hive-user/201601.mbox/%3C20160128205008.2154F185EB%40minotaur.apache.org%3E"},{"reference_url":"http://packetstormsecurity.com/files/135836/Apache-Hive-Authorization-Bypass.html","reference_id":"","reference_type":"","scores":[{"value":"8.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://packetstormsecurity.com/files/135836/Apache-Hive-Authorization-Bypass.html"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7521","reference_id":"","reference_type":"","scores":[{"value":"0.00404","scoring_system":"epss","scoring_elements":"0.61493","published_at":"2026-06-14T12:55:00Z"},{"value":"0.00404","scoring_system":"epss","scoring_elements":"0.61385","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00404","scoring_system":"epss","scoring_elements":"0.6149","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00404","scoring_system":"epss","scoring_elements":"0.61497","published_at":"2026-06-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2015-7521"},{"reference_url":"https://github.com/apache/hive/commit/98f933f269e6b528ef84912b3d701ca3272ec04b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/hive/commit/98f933f269e6b528ef84912b3d701ca3272ec04b"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/01/28/12","reference_id":"","reference_type":"","scores":[{"value":"8.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2016/01/28/12"},{"reference_url":"http://www.securityfocus.com/archive/1/537549/100/0/threaded","reference_id":"","reference_type":"","scores":[{"value":"8.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.securityfocus.com/archive/1/537549/100/0/threaded"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7521","reference_id":"CVE-2015-7521","reference_type":"","scores":[{"value":"8.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7521"},{"reference_url":"https://github.com/advisories/GHSA-83r3-c79w-f6wc","reference_id":"GHSA-83r3-c79w-f6wc","reference_type":"","scores":[{"value":"8.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-83r3-c79w-f6wc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/14528?format=json","purl":"pkg:maven/org.apache.hive/hive-exec@1.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-j92t-aphn-ebgm"},{"vulnerability":"VCID-peph-1zw1-c3d2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hive/hive-exec@1.2.2"}],"aliases":["CVE-2015-7521","GHSA-83r3-c79w-f6wc"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-eq5d-6k2k-euas"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/47977?format=json","vulnerability_id":"VCID-j92t-aphn-ebgm","summary":"Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive information written into this file. Users are recommended to upgrade to version 4.0.1, which fixes this issue.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-29869","reference_id":"","reference_type":"","scores":[{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.2654","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26741","published_at":"2026-06-14T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26757","published_at":"2026-06-13T12:55:00Z"},{"value":"0.00096","scoring_system":"epss","scoring_elements":"0.26743","published_at":"2026-06-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-29869"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29869","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29869"},{"reference_url":"http://www.openwall.com/lists/oss-security/2025/01/28/4","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2025/01/28/4"},{"reference_url":"https://github.com/apache/hive/commit/20106e254527f7d71b2e34455c4322e14950c620","reference_id":"20106e254527f7d71b2e34455c4322e14950c620","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T14:24:47Z/"}],"url":"https://github.com/apache/hive/commit/20106e254527f7d71b2e34455c4322e14950c620"},{"reference_url":"https://github.com/advisories/GHSA-c476-j253-5rgq","reference_id":"GHSA-c476-j253-5rgq","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-c476-j253-5rgq"},{"reference_url":"https://lists.apache.org/thread/h27ohpyrqf9w1m3c0tqr7x8jg59rcrv6","reference_id":"h27ohpyrqf9w1m3c0tqr7x8jg59rcrv6","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T14:24:47Z/"}],"url":"https://lists.apache.org/thread/h27ohpyrqf9w1m3c0tqr7x8jg59rcrv6"},{"reference_url":"https://github.com/apache/hive","reference_id":"hive","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T14:24:47Z/"}],"url":"https://github.com/apache/hive"},{"reference_url":"https://issues.apache.org/jira/browse/HIVE-28134","reference_id":"HIVE-28134","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T14:24:47Z/"}],"url":"https://issues.apache.org/jira/browse/HIVE-28134"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/376926?format=json","purl":"pkg:maven/org.apache.hive/hive-exec@4.0.1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hive/hive-exec@4.0.1"}],"aliases":["CVE-2024-29869","GHSA-c476-j253-5rgq"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-j92t-aphn-ebgm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/203343?format=json","vulnerability_id":"VCID-n7vn-kgyh-w7bm","summary":"org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-3083","reference_id":"","reference_type":"","scores":[{"value":"0.00206","scoring_system":"epss","scoring_elements":"0.43134","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00206","scoring_system":"epss","scoring_elements":"0.42975","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00206","scoring_system":"epss","scoring_elements":"0.43144","published_at":"2026-06-14T12:55:00Z"},{"value":"0.00206","scoring_system":"epss","scoring_elements":"0.43153","published_at":"2026-06-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-3083"},{"reference_url":"https://lists.apache.org/thread.html/0851bcf85635385f94cdaa008053802d92b4aab0a3075e30ed171192@%3Cdev.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/0851bcf85635385f94cdaa008053802d92b4aab0a3075e30ed171192@%3Cdev.hive.apache.org%3E"},{"reference_url":"http://www.securityfocus.com/bid/98669","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.securityfocus.com/bid/98669"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3083","reference_id":"CVE-2016-3083","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3083"},{"reference_url":"https://github.com/advisories/GHSA-gf2v-9hp6-44qg","reference_id":"GHSA-gf2v-9hp6-44qg","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-gf2v-9hp6-44qg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/14528?format=json","purl":"pkg:maven/org.apache.hive/hive-exec@1.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-j92t-aphn-ebgm"},{"vulnerability":"VCID-peph-1zw1-c3d2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hive/hive-exec@1.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/15058?format=json","purl":"pkg:maven/org.apache.hive/hive-exec@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-j92t-aphn-ebgm"},{"vulnerability":"VCID-peph-1zw1-c3d2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hive/hive-exec@2.0.1"}],"aliases":["CVE-2016-3083","GHSA-gf2v-9hp6-44qg"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n7vn-kgyh-w7bm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/30677?format=json","vulnerability_id":"VCID-peph-1zw1-c3d2","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1284.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1284.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2018-1284","reference_id":"","reference_type":"","scores":[{"value":"0.00469","scoring_system":"epss","scoring_elements":"0.64982","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00469","scoring_system":"epss","scoring_elements":"0.65082","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00614","scoring_system":"epss","scoring_elements":"0.70461","published_at":"2026-06-14T12:55:00Z"},{"value":"0.00614","scoring_system":"epss","scoring_elements":"0.70463","published_at":"2026-06-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2018-1284"},{"reference_url":"https://github.com/apache/hive/commit/b0a58d245875dc1b3ac58a7cf1a61d3b17805e96","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/apache/hive/commit/b0a58d245875dc1b3ac58a7cf1a61d3b17805e96"},{"reference_url":"https://github.com/apache/hive/commit/f80a38ae1174553022deae4f8774918401d9756d","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/hive/commit/f80a38ae1174553022deae4f8774918401d9756d"},{"reference_url":"https://issues.apache.org/jira/browse/HIVE-18879","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://issues.apache.org/jira/browse/HIVE-18879"},{"reference_url":"https://lists.apache.org/thread.html/29184dbce4a37be2af36e539ecb479b1d27868f73ccfdff46c7174b4@%3Cdev.hive.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/29184dbce4a37be2af36e539ecb479b1d27868f73ccfdff46c7174b4@%3Cdev.hive.apache.org%3E"},{"reference_url":"http://www.securityfocus.com/bid/103750","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.securityfocus.com/bid/103750"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1564357","reference_id":"1564357","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1564357"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1284","reference_id":"CVE-2018-1284","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1284"},{"reference_url":"https://github.com/advisories/GHSA-rxmr-c9jm-7mm8","reference_id":"GHSA-rxmr-c9jm-7mm8","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rxmr-c9jm-7mm8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/14536?format=json","purl":"pkg:maven/org.apache.hive/hive-exec@2.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-j92t-aphn-ebgm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hive/hive-exec@2.3.3"}],"aliases":["CVE-2018-1284","GHSA-rxmr-c9jm-7mm8"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"5.9","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-peph-1zw1-c3d2"}],"fixing_vulnerabilities":[],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hive/hive-exec@1.2.0"}