CVE-2018-11777

Source
https://nvd.nist.gov/vuln/detail/CVE-2018-11777
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11777.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-11777
Aliases
Published
2018-11-08T14:29:00Z
Modified
2024-11-21T03:44:00Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

References

Affected packages

Git / github.com/apache/hive

Affected ranges

Type
GIT
Repo
https://github.com/apache/hive
Events