Executive brief
Apache Hive Information Exposure and Observable Timing Discrepancy
Affected products
- Maven org.apache.hive:hive
Junglewise Threat Intelligence
CVE-2020-1926: Apache Hive Information Exposure and Observable Timing Discrepancy
CVE-2020-1926 · Severity: low · CVSS 3.1 · Published 2022-02-09
Technologies: org.apache.hive:hive (Maven). Vendors: Maven.
Related threats
- Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
- Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
- Incorrect Permission Assignment for Critical Resource in Apache hive
- High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
- Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service