Executive brief
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
Affected products
- Maven org.apache.hive:hive
Junglewise Threat Intelligence
CVE-2021-34538: Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
CVE-2021-34538 · Severity: low · CVSS 3.1 · Published 2022-07-17
Technologies: org.apache.hive:hive (Maven). Vendors: Maven.
Related threats
- Apache Hive Information Exposure and Observable Timing Discrepancy
- Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
- Incorrect Permission Assignment for Critical Resource in Apache hive
- High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
- Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service