Executive brief
Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore
Affected products
- Maven org.apache.hive:hive-exec
Junglewise Threat Intelligence
CVE-2022-41137: Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore
CVE-2022-41137 · Severity: low · CVSS 3.1 · Published 2024-12-05
Technologies: org.apache.hive:hive-exec (Maven). Vendors: Maven.
Related threats
- Apache Hive Incorrectly Assigns Permissions for a Critical Resource
- Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
- Incorrect Permission Assignment for Critical Resource in Apache hive
- High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
- Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service