https://seclists.org/oss-sec/2024/q2/208: CVE-2023-35701: Apache Hive: Arbitrary command execution via JDBC driver
Published May 3, 2024
·Updated
Affected Software
1 affected component
Apache Hive
Frequently Asked Questions
1
What is the severity of CVE-2023-35701?
CVE-2023-35701 is classified as a critical severity vulnerability due to the potential for arbitrary command execution.
2
How do I fix CVE-2023-35701?
To fix CVE-2023-35701, update your Apache Hive installation to the latest version that addresses this vulnerability.
3
What are the potential impacts of CVE-2023-35701?
The potential impacts of CVE-2023-35701 include unauthorized access to system commands and overall system compromise.
4
Which versions of Apache Hive are affected by CVE-2023-35701?
CVE-2023-35701 affects certain earlier versions of Apache Hive prior to the patch release.
5
How can I check if my Apache Hive installation is vulnerable to CVE-2023-35701?
You can check your Apache Hive installation by reviewing the version number against the list of affected versions in the vulnerability advisory.