GHSA-rrfq-g5fq-fc9c

ghsaUSosv

Improper Authentication in hive:hive-exec

view advisory published 2018-11-21Licence: CC-BY-4.0

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-11777US	high8.1	2.30% (83rd)	—	2018-11-08
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is n…

references

External citations — patches, advisories, analysis.

http://www.securityfocus.com/bid/105886WEB
https://github.com/advisories/GHSA-rrfq-g5fq-fc9cADVISORY
https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb@%3Cdev.hive.apache.org%3EWEB
https://nvd.nist.gov/vuln/detail/CVE-2018-11777ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan