Skip to content
OpenAdvisories

Archive

16 November 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low —

    Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service

    Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.