Lucene search

K

CVE-2024-23945

🗓️ 23 Dec 2024 16:05:15Reported by apacheType 
cve
 cve
🔗 web.nvd.nist.gov👁 46 Views

Apache Hive and Spark expose cookie signatures, risking exploitation due to verification failures.

Show more
Related
Detection
Affected
Refs
Vulners
Node
apacheapache_hiveRange1.2.04.0.0
OR
apacheapache_sparkRange2.0.03.0.0
OR
apacheapache_sparkRange3.0.03.3.4
OR
apacheapache_sparkRange3.4.03.4.2
OR
apacheapache_sparkRange3.5.0
[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.hive:hive-service",
    "product": "Apache Hive",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "4.0.0",
        "status": "affected",
        "version": "1.2.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.spark:spark-hive-thriftserver_2.11",
    "product": "Apache Spark",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.spark:spark-hive-thriftserver_2.12",
    "product": "Apache Spark",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.3.4",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.4.2",
        "status": "affected",
        "version": "3.4.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "3.5.0",
        "versionType": "semver"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
23 Dec 2024 16:15Current
6.7Medium risk
Vulners AI Score6.7
CVSS35.9
EPSS0.0004
SSVC
46
.json
Report