org.apache.hive:hive-common@1.2.2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.apache.hive:hive-common package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Information Exposure

org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL.

Affected versions of this package are vulnerable to Information Exposure. This vulnerability relates to a replay attack due to authenticating twice within a short period of time, when the context root is requested.

How to fix Information Exposure?

Upgrade org.apache.hive:hive-common to version 2.2.0 or higher.

[1.2.0,2.2.0)