CVE-2018-11777

published 2018-11-08

CVE-2018-11777: In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql…

high 8.1 CVSS 3.0

AV N AC L PR L UI N S U C H I H A N

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	hive	<= 2.3.3	—
apache	hive	3.0.0 – 3.1.0	—
apache_software_foundation	apache_hive	—	—