Search for packages
| purl | pkg:maven/org.apache.hive/hive@2.2.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-54g4-5cf6-hjp3
Aliases: CVE-2020-1926 |
Apache Hive Information Exposure and Observable Timing Discrepancy Apache Hive cookie signature verification used a non constant time comparison which … |
Vulnerable |
|
GHSA-v3p8-j597-3xg8
Aliases: CVE-2021-34538 |
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization. Apache Hive before 3.1.3 `CREATE` … |
Not vulnerable |
|
CVE-2017-12625
|
Information Exposure Apache Hive expose an interface through which masking policies can be defined on tables or views, e.g., using … |
Vulnerable |
|
GHSA-rxmr-c9jm-7mm8
Aliases: CVE-2018-1284 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive In Apache Hive 0.6.0 to 2.3.2, malicious user might … |
Vulnerable Vulnerable |
|
GHSA-p639-xxv5-j383
Aliases: CVE-2018-1315 |
Incorrect Permission Assignment for Critical Resource in Apache hive In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement … |
Vulnerable Vulnerable |
|
GHSA-2g9q-chq2-w8qw
Aliases: CVE-2017-12625 |
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before … | There are no reported fixed by versions. |
|
CVE-2018-1314
|
Missing Authorization The Hive `EXPLAIN` operation does not check for necessary authorization of involved entities in a query. An unauthorized … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11777
|
Improper Access Control In Apache Hive, local resources on HiveServer2 machines are not properly protected against a malicious user if … |
Vulnerable Vulnerable Vulnerable Vulnerable |