CVE-2014-0228: Low severity apache hive vulnerability
Published Nov 16, 2014
·Updated
Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.
Affected Software
1 affected component
Apache Hive<=0.13.0
Event History
Nov 16, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-0228?
CVE-2014-0228 is rated as a medium severity vulnerability.
2
How do I fix CVE-2014-0228?
To fix CVE-2014-0228, upgrade to Apache Hive version 0.13.1 or later.
3
What type of impact does CVE-2014-0228 have?
CVE-2014-0228 can lead to unauthorized access to sensitive information from remote authenticated users.
4
Which versions of Apache Hive are affected by CVE-2014-0228?
CVE-2014-0228 affects Apache Hive versions prior to 0.13.1.
5
Is CVE-2014-0228 related to file permissions?
Yes, CVE-2014-0228 involves improper checking of file permissions for import and export statements.