What is the severity of CVE-2018-11777?

The severity of CVE-2018-11777 is high with a score of 8.1.

What is the description of CVE-2018-11777?

CVE-2018-11777 is a vulnerability in Apache Hive versions 2.3.3, 3.0.0, and 3.1.0 that allows malicious users to access local resources on HiveServer2 machines if certain authorizers are not in use.

Which software versions are affected by CVE-2018-11777?

CVE-2018-11777 affects Apache Hive versions 2.3.3, 3.0.0, and 3.1.0.

How can I protect my system from CVE-2018-11777?

To protect your system from CVE-2018-11777, ensure that ranger, sentry, or sql standard authorizer is in use on your HiveServer2 machines.

Where can I find more information about CVE-2018-11777?

You can find more information about CVE-2018-11777 on the following websites: [http://www.securityfocus.com/bid/105886](http://www.securityfocus.com/bid/105886) and [https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb@%3Cdev.hive.apache.org%3E](https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb@%3Cdev.hive.apache.org%3E)

Vulnerability/
CVE-2018-11777

high

8.1

8/11/2018

5/8/2024

CVE-2018-11777

First published: Thu Nov 08 2018(Updated: )

In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.

Credit: security@apache.org

Affected Software	Affected Version	How to fix
Apache Hive	<=2.3.3
Apache Hive	>=3.0.0<=3.1.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-11777?
The severity of CVE-2018-11777 is high with a score of 8.1.
What is the description of CVE-2018-11777?
CVE-2018-11777 is a vulnerability in Apache Hive versions 2.3.3, 3.0.0, and 3.1.0 that allows malicious users to access local resources on HiveServer2 machines if certain authorizers are not in use.
Which software versions are affected by CVE-2018-11777?
CVE-2018-11777 affects Apache Hive versions 2.3.3, 3.0.0, and 3.1.0.
How can I protect my system from CVE-2018-11777?
To protect your system from CVE-2018-11777, ensure that ranger, sentry, or sql standard authorizer is in use on your HiveServer2 machines.
Where can I find more information about CVE-2018-11777?
You can find more information about CVE-2018-11777 on the following websites: [http://www.securityfocus.com/bid/105886](http://www.securityfocus.com/bid/105886) and [https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb@%3Cdev.hive.apache.org%3E](https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb@%3Cdev.hive.apache.org%3E)

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/severity
agent/last-modified-date
agent/author
agent/description
agent/first-publish-date
agent/tags
agent/event
vendor/apache
canonical/apache hive
version/apache hive/2.3.3
version/apache hive/3.0.0
version/apache hive/3.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.