Vulnerabilities > CVE-2018-11777 - Unspecified vulnerability in Apache Hive

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
apache
NVD
Published: 2018-11-08
Updated: 2024-11-21

Summary

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

Vulnerable Configurations

Part Description Count
Application
Apache
35

References