Maven/org.apache.hive:hive-exec CVE-2024-29869: medium 5.5, EPSS 0.29%
Apache Hive Incorrectly Assigns Permissions for a Critical Resource
Action: Upgrade org.apache.hive:hive-exec to 4.0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.1 | - |
Fixed versions
| 4.0.1 |
Sources
- osv: GHSA-c476-j253-5rgq
- https://nvd.nist.gov/vuln/detail/CVE-2024-29869
- https://github.com/apache/hive/commit/20106e254527f7d71b2e34455c4322e14950c620
- https://github.com/apache/hive
- https://issues.apache.org/jira/browse/HIVE-28134
- https://lists.apache.org/thread/h27ohpyrqf9w1m3c0tqr7x8jg59rcrv6
- http://www.openwall.com/lists/oss-security/2025/01/28/4
CVE-2024-29869 · published · modified · JSON