{"action":"Upgrade org.apache.hive:hive-service to 1.2.2 (1.x) or 2.0.1 (2.x) or later.","affected":[{"fixed":"1.2.2","introduced":"0"},{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"org.apache.hive:hive-service","cve_ids":["CVE-2016-3083"],"ecosystem":"Maven","epss":0.01006,"exploited":false,"fixed_versions":["1.2.2","2.0.1"],"ghsa_id":"GHSA-gf2v-9hp6-44qg","id":"tcs_01M5N8Y2XCEAYCMEJKJD2MRYNX","modified_at":"2023-11-08T03:58:25.198532Z","published_at":"2019-03-14T15:40:32Z","references":["https://osv.dev/vulnerability/GHSA-gf2v-9hp6-44qg","https://nvd.nist.gov/vuln/detail/CVE-2016-3083","https://github.com/advisories/GHSA-gf2v-9hp6-44qg","https://lists.apache.org/thread.html/0851bcf85635385f94cdaa008053802d92b4aab0a3075e30ed171192@%3Cdev.hive.apache.org%3E","http://www.securityfocus.com/bid/98669"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gf2v-9hp6-44qg#Maven/org.apache.hive:hive-service","url":"https://osv.dev/vulnerability/GHSA-gf2v-9hp6-44qg"}],"summary":"org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation"}