Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-exec@1.0.0
purl pkg:maven/org.apache.hive/hive-exec@1.0.0
Next non-vulnerable version 4.0.1
Latest non-vulnerable version 4.0.1
Risk score 3.8
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-c476-j253-5rgq
Aliases:
CVE-2024-29869
Apache Hive Incorrectly Assigns Permissions for a Critical Resource Hive creates a credentials file to a temporary directory in the …
4.0.1
Not vulnerable
GHSA-rrfq-g5fq-fc9c
Aliases:
CVE-2018-11777
Improper Authentication in hive:hive-exec In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected …
2.3.4
Vulnerable
2.3.4
Vulnerable
GHSA-rxmr-c9jm-7mm8
Aliases:
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might …
2.3.3
Vulnerable
2.3.3
Vulnerable
GHSA-83r3-c79w-f6wc
Aliases:
CVE-2015-7521
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 …
1.2.2
Vulnerable
1.2.2
Vulnerable
GHSA-gf2v-9hp6-44qg
Aliases:
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and …
1.2.2
Vulnerable
1.2.2
Vulnerable
GHSA-5gvm-hrw5-h6xf
Aliases:
CVE-2015-1772
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before …
1.0.1
Vulnerable
1.0.1
Vulnerable
This package is not known to fix any advisories.