- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 10 · 1 high, 1 medium
- Registry
- Maven Central
Advisories 10
- CVE-2024-29869Medium 5.5
Apache Hive: Credentials file created with non restrictive permissions
Affected: from 1.1.0, fixed in 4.0.1; fixed in 4.0.1.
- CVE-2022-41137High 8.3
Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore
Affected: from 4.0.0-alpha-1, fixed in 4.0.0; from 4.0.0-alpha-1, fixed in 4.0.0-alpha-2.
- CVE-2018-11777Unrated
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if…
Affected: from 3.0.0, fixed in 3.1.1; fixed in 2.3.4.
- CVE-2018-1315Unrated
In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server…
Affected: from 2.1.0, fixed in 2.3.3.
- CVE-2018-1284Unrated
In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_fl…
Affected: from 0.6.0, fixed in 2.3.3.
- CVE-2017-12625Unrated
Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be…
Affected: from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
- CVE-2016-3083Unrated
Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes).
Affected: fixed in 1.2.2; from 2.0.0, fixed in 2.0.1.
- CVE-2015-7521Unrated
The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and…
Affected: from 1.0.0, fixed in 1.2.2.
- CVE-2015-1772Unrated
The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0…
Affected: from 1.0.0, fixed in 1.0.1; from 1.1.0, fixed in 1.1.1.
- CVE-2014-0228Unrated
Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and…
Affected: fixed in 0.13.1.