Executive brief
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
Affected products
- Maven org.apache.hive:hive-service
- Maven org.apache.hive:hive-exec
- Maven org.apache.hive:hive
Junglewise Threat Intelligence
CVE-2018-1284: Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
CVE-2018-1284 · Severity: low · CVSS 3 · Published 2018-11-21
Technologies: org.apache.hive:hive-service (Maven), org.apache.hive:hive-exec (Maven), org.apache.hive:hive (Maven). Vendors: Maven.
Related threats
- Apache Hive Incorrectly Assigns Permissions for a Critical Resource
- Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails
- Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore
- Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
- Apache Hive Information Exposure and Observable Timing Discrepancy