ByteOS Network

NVD Vulnerability Details :

CVE-2014-0228

Deferred

Source-secalert@redhat.com

Published At-16 Nov, 2014 | 17:59

Updated At-12 Apr, 2025 | 10:46

Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:P/I:N/A:N

CPE Matches

The Apache Software Foundation

>>hive>>Versions up to 0.13.0(inclusive)

cpe:2.3:a:apache:hive:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-284	Primary	nvd@nist.gov

CWE ID: CWE-284

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://mail-archives.apache.org/mod_mbox/hive-user/201406.mbox/%3CCABgNGzeN7E+9d=YV5yvnKA7wmSx1op_avtUjPcPtDaR6DLJM6g%40mail.gmail.com%3E	secalert@redhat.com	N/A
http://packetstormsecurity.com/files/127091/Apache-Hive-0.13.0-Authorization-Failure.html	secalert@redhat.com	N/A
http://www.securityfocus.com/archive/1/532418/100/0/threaded	secalert@redhat.com	N/A
http://mail-archives.apache.org/mod_mbox/hive-user/201406.mbox/%3CCABgNGzeN7E+9d=YV5yvnKA7wmSx1op_avtUjPcPtDaR6DLJM6g%40mail.gmail.com%3E	af854a3a-2127-422b-91ae-364da2661108	N/A
http://packetstormsecurity.com/files/127091/Apache-Hive-0.13.0-Authorization-Failure.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/532418/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A