CVE-2018-11777 | BDVDB-2026-109213 Detail

ApacheApache Hive

Description#

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/105886
https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb%40%3Cdev.hive.apache.org%3E

Exploit#

No public exploit known

History#

Version 12018-11-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.