Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-service@2.3.3
purl pkg:maven/org.apache.hive/hive-service@2.3.3
Next non-vulnerable version 4.0.0
Latest non-vulnerable version 4.0.0
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-77pm-w3hx-f8mj
Aliases:
CVE-2024-23945
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails Signing cookies is an application security feature …
4.0.0
Not vulnerable
CVE-2020-1926

Information Exposure Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to …
2.3.8
Vulnerable
CVE-2021-34538

Missing Authentication for Critical Function Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization …
3.1.3
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-rxmr-c9jm-7mm8
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might … CVE-2018-1284
GHSA-p639-xxv5-j383
Incorrect Permission Assignment for Critical Resource in Apache hive In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement … CVE-2018-1315