Skip to content
OpenAdvisories

Package · Maven

org.apache.hive:hive-service

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-23945

    Apache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails

    Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity. The signature helps prevent malicious actors from modifying the cookie value, which can lead to security vulnerabilities …

    Apache Software Foundation Apache Hive Apache Spark org.apache.hive:hive-service Maven
  • Medium 4.3
    CVE-2017-12625

    Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does …

    Apache Software Foundation Apache Hive org.apache.hive:hive-exec org.apache.hive:hive Maven