Skip to content
OpenAdvisories

Package · Maven

org.apache.hive:hive

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2020-1926

    Timing attack in Cookie signature verification

    Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8

    Apache Software Foundation Apache Hive org.apache.hive:hive Maven
  • Medium 4.3
    CVE-2017-12625

    Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does …

    Apache Software Foundation Apache Hive org.apache.hive:hive-exec org.apache.hive:hive Maven