NVD

Id
29138  
Name
CVE-2014-0228  
Description
Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-11-16  
Modified Date
2014-11-18  
Seq
2014-0228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154600 29138 CVE-2014-0228 [hive-user] 20140612 CVE-2014-0228: Apache Hive Authorization vulnerability  View
154601 29138 CVE-2014-0228 http://packetstormsecurity.com/files/127091/Apache-Hive-0.13.0-Authorization-Failure.html  View
154602 29138 CVE-2014-0228 20140612 CVE-2014-0228: Apache Hive Authorization vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16598 JVNDB-2014-005473 Apache Hive における重要な情報を取得される脆弱性 Apache Hive は、SQL 標準ベースの認証モードの際、(1) インポートおよび (2) エクスポートステートメントのパーミッションを適切にチェックしないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-0228 67629 CVE-2014-0228 29138 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005473.html 2014-06-12 2014-11-18 View