CVE-2014-0228

Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export…

published November 16, 2014

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03498 · 89.0th percentile
Published
2014-11-16T17:00Z
EPSS history
Timeline
  • 16 NOV 17:00Z
    Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export…
    cvelistv5