CVE-2018-11777

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

Score

CVSS 3.0 8.1 High

Status

Modified - security@apache.org

Published

2018-11-08

Last modified

2024-08-05

Weaknesses

CWE-668

Affected products

• Hive (Apache)
• Apache Hive (Apache Software Foundation)

References

• http://www.securityfocus.com/bid/105886
• https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb%40%3Cdev.hive.apache.org%…