Description
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.
Remediation
References
http://www.securityfocus.com/bid/105886
https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb%40%3Cdev.hive.apache.org%3E
Related Vulnerabilities
CVE-2021-26276 Vulnerability in npm package config-shield
CVE-2023-3672 Vulnerability in npm package webmention.js
CVE-2021-25914 Vulnerability in npm package object-collider
CVE-2022-31112 Vulnerability in npm package parse-server
CVE-2018-1000013 Vulnerability in maven package org.jenkins-ci.plugins:release