Apache Hive authorization issue vulnerability

Apache Hive is a Hadoop (Distributed Systems Infrastructure) based data warehouse software from the Apache Foundation. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. versions prior to Apache Hive 3.1.3 have an authorization issue vulnerability that stems from the fact that Hive’s CREATE and DRO functions do not check for authorization and can be exploited by an unauthorized attacker to delete and recreate UDFs.