Executive brief
Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
Affected products
- Maven org.apache.hive:hive-service
- Maven org.apache.hive:hive-exec
- Maven org.apache.hive:hive
Junglewise Threat Intelligence
CVE-2014-0228: Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
CVE-2014-0228 · Severity: info · Published 2018-11-21
Technologies: org.apache.hive:hive-service (Maven), org.apache.hive:hive-exec (Maven), org.apache.hive:hive (Maven). Vendors: Maven.
Related threats
- Apache Hive Incorrectly Assigns Permissions for a Critical Resource
- Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails
- Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore
- Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
- Apache Hive Information Exposure and Observable Timing Discrepancy