Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-service@2.3.8
purl pkg:maven/org.apache.hive/hive-service@2.3.8
Next non-vulnerable version 4.0.0
Latest non-vulnerable version 4.0.0
Risk score 3.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-77pm-w3hx-f8mj
Aliases:
CVE-2024-23945
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails Signing cookies is an application security feature …
4.0.0
Not vulnerable
CVE-2021-34538

Missing Authentication for Critical Function Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization …
3.1.3
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2020-1926
Information Exposure Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to …