{"action":"Upgrade org.apache.hive:hive-exec to 2.3.3 or later.","affected":[{"fixed":"2.3.3","introduced":"0.6.0"}],"component":"org.apache.hive:hive-exec","cve_ids":["CVE-2018-1284"],"ecosystem":"Maven","epss":0.0215,"exploited":false,"fixed_versions":["2.3.3"],"ghsa_id":"GHSA-rxmr-c9jm-7mm8","id":"tcs_01M5N9CW385YY6263AVWS15EQ1","modified_at":"2024-03-04T20:16:08.701749Z","published_at":"2018-11-21T22:24:22Z","references":["https://osv.dev/vulnerability/GHSA-rxmr-c9jm-7mm8","https://nvd.nist.gov/vuln/detail/CVE-2018-1284","https://github.com/apache/hive/commit/f80a38ae1174553022deae4f8774918401d9756d","https://github.com/advisories/GHSA-rxmr-c9jm-7mm8","https://issues.apache.org/jira/browse/HIVE-18879","https://lists.apache.org/thread.html/29184dbce4a37be2af36e539ecb479b1d27868f73ccfdff46c7174b4@%3Cdev.hive.apache.org%3E","http://www.securityfocus.com/bid/103750"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-rxmr-c9jm-7mm8#Maven/org.apache.hive:hive-exec","url":"https://osv.dev/vulnerability/GHSA-rxmr-c9jm-7mm8"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Apache hive"}