CVE-2024-29869

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-29869
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29869.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-29869
Aliases
Published
2025-01-28T22:15:15Z
Modified
2025-01-29T19:27:06.022164Z
Summary
[none]
Details

Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive information written into this file. Users are recommended to upgrade to version 4.0.1, which fixes this issue.

References

Affected packages

Git / github.com/apache/hive

Affected ranges

Type
GIT
Repo
https://github.com/apache/hive
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed