Information Disclosure in Apache Hive by Apache

CVE-2017-12625

What is CVE-2017-12625?

Apache Hive prior to versions 2.1.2, 2.2.1, and 2.3.1 allows the incorrect enforcement of masking policies for columns in tables or views. This flaw arises when a view is created over a table; the relevant policies are not applied correctly, potentially exposing sensitive information to unauthorized access. Users relying on column masking for data protection may find that their sensitive data remains visible. It is crucial for organizations using affected versions of Apache Hive to apply the latest updates to safeguard against potential data leaks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References