org.apache.hive:hive-exec

3 results · Clear filters · Feed

• Low 3.7
  CVE-2018-1284

  Exposure of Sensitive Information to an Unauthorized Actor in Apache hive

  In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_float/xpath_long/xpath_int/xpath_short) to expose the content of a file on the machine running HiveServer2 owned by HiveSe…

  Apache Software Foundation Apache Hive org.apache.hive:hive-exec org.apache.hive:hive Maven
  Apr 5, 2018
• Low 3.7
  CVE-2018-1315

  Incorrect Permission Assignment for Critical Resource in Apache hive

  In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an arbitrary location on the cluster where the command is run from. This is because FT…

  Apache Software Foundation Apache Hive org.apache.hive:hive-exec org.apache.hive:hive Maven
  Apr 5, 2018
• Low —
  CVE-2014-0228

  Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service

  Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.

  org.apache.hive:hive-exec org.apache.hive:hive org.apache.hive:hive-service Maven
  Nov 16, 2014