org.apache.hive:hive-jdbc

3 results · Feed

• Medium 6.6
  CVE-2023-35701

  Apache Hive: Arbitrary command execution via JDBC driver

  Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver (client) is r…

  Apache Software Foundation Apache Hive org.apache.hive:hive-jdbc Maven
  May 3, 2024
• Medium 4.3
  CVE-2018-1314

  Moderate severity vulnerability that affects org.apache.hive:hive-jdbc

  In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary table or view and expose table metadata and statistics.

  Apache Software Foundation Apache Hive org.apache.hive:hive-jdbc Maven
  Nov 8, 2018
• Critical 9.1
  CVE-2018-1282

  SQL Injection in hive-jdbc

  This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.

  Apache Software Foundation Apache Hive org.apache.hive:hive-jdbc Maven
  Apr 5, 2018