CVE-2018-11777
Fixed upstream EPSS 2%
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.
Products: Apache Software Foundation Apache Hive
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.hive:hive-exec | 3.1.1 |
| Maven | org.apache.hive:hive-exec | 2.3.4 |