Detections
Analytics
CVE-2015-7521
high
Description
The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operations.
References
https://github.com/advisories/GHSA-83r3-c79w-f6wc
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0737
http://www.securityfocus.com/archive/1/537549/100/0/threaded
http://www.openwall.com/lists/oss-security/2016/01/28/12
http://packetstormsecurity.com/files/135836/Apache-Hive-Authorization-Bypass.html