Search for packages
| purl | pkg:maven/org.apache.hive/hive-service@1.1.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-1926
|
Information Exposure Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to … |
Vulnerable |
|
CVE-2021-34538
|
Missing Authentication for Critical Function Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization … |
Vulnerable |
|
GHSA-rxmr-c9jm-7mm8
Aliases: CVE-2018-1284 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might … |
Vulnerable Vulnerable |
|
GHSA-83r3-c79w-f6wc
Aliases: CVE-2015-7521 |
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 … |
Vulnerable Vulnerable |
|
GHSA-gf2v-9hp6-44qg
Aliases: CVE-2016-3083 |
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and … |
Vulnerable Vulnerable |
|
GHSA-5gvm-hrw5-h6xf
Aliases: CVE-2015-1772 |
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before … |
Vulnerable Vulnerable |