Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-service@2.3.2
purl pkg:maven/org.apache.hive/hive-service@2.3.2
Next non-vulnerable version 4.0.0
Latest non-vulnerable version 4.0.0
Risk score 3.9
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-77pm-w3hx-f8mj
Aliases:
CVE-2024-23945
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails Signing cookies is an application security feature …
4.0.0
Not vulnerable
CVE-2020-1926

Information Exposure Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to …
2.3.8
Vulnerable
CVE-2021-34538

Missing Authentication for Critical Function Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization …
3.1.3
Vulnerable
GHSA-rxmr-c9jm-7mm8
Aliases:
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might …
2.3.3
Vulnerable
2.3.3
Vulnerable
GHSA-p639-xxv5-j383
Aliases:
CVE-2018-1315
Incorrect Permission Assignment for Critical Resource in Apache hive In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement …
2.3.3
Vulnerable
2.3.3
Vulnerable
This package is not known to fix any advisories.