CVE-2014-0228

Description

Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.

Risk Information

Base Score

4.2

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C

EPSS Score

Exploitation Probability

0.322

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2014-0228 are fixed in Apache-hive-exec 0.13.1	Windows
Vulnerabilities CVE-2014-0228 are fixed in Apache-hive 0.13.1	Windows
Vulnerabilities CVE-2014-0228 are fixed in Apache-hive-service 0.13.1	Windows
Vulnerabilities CVE-2014-0228 are fixed in Apache-hive-exec for Linux 0.13.1	Linux
Vulnerabilities CVE-2014-0228 are fixed in Apache-hive for Linux 0.13.1	Linux
Vulnerabilities CVE-2014-0228 are fixed in Apache-hive-service for Linux 0.13.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234