Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-exec@2.2.0
purl pkg:maven/org.apache.hive/hive-exec@2.2.0
Next non-vulnerable version 4.0.1
Latest non-vulnerable version 4.0.1
Risk score 3.6
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-c476-j253-5rgq
Aliases:
CVE-2024-29869
Apache Hive Incorrectly Assigns Permissions for a Critical Resource Hive creates a credentials file to a temporary directory in the …
4.0.1
Not vulnerable
GHSA-rrfq-g5fq-fc9c
Aliases:
CVE-2018-11777
Improper Authentication in hive:hive-exec In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected …
2.3.4
Vulnerable
2.3.4
Vulnerable
GHSA-rxmr-c9jm-7mm8
Aliases:
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might …
2.3.3
Vulnerable
2.3.3
Vulnerable
GHSA-p639-xxv5-j383
Aliases:
CVE-2018-1315
Incorrect Permission Assignment for Critical Resource in Apache hive In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement …
2.3.3
Vulnerable
2.3.3
Vulnerable
GHSA-2g9q-chq2-w8qw
Aliases:
CVE-2017-12625
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before … There are no reported fixed by versions.
This package is not known to fix any advisories.