Back to search
CVE-2018-1314
Published: Nov 8, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary table or view and expose table metadata and statistics.
| Vendor | Product | Versions |
|---|---|---|
Apache Software Foundation | Apache Hive | affected All versions of Hive including 2.3.3, 3.1.0 and earlier |
References
105884
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now