CLEANSTART-2026-GO41173 Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly

🗓️ 08 Oct 2026 00:55:31Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Hive creates a credentials file in a temporary directory with 644 permissions by default.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	27 Jul 202610:45	–	ibm
IBM Security Bulletins	Security Bulletin: Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly, which affects IBM watsonx.data	29 Aug 202514:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® Big SQL on IBM Software Hub.	26 Jun 202614:50	–	ibm
BDU FSTEC	The vulnerability of the Apache Hive database, related to the improper assignment of permissions for critical resources, allows attackers to gain unauthorized access to protected information.	4 Feb 202500:00	–	bdu_fstec
Chainguard	CVE-2024-29869 vulnerabilities	28 Jan 202522:15	–	cgr
Circl	CVE-2024-29869	28 Jan 202521:36	–	circl
CNNVD	Apache Hive 安全漏洞	28 Jan 202500:00	–	cnnvd
CNVD	Apache Hive Authorization Issues Vulnerability	18 Feb 202500:00	–	cnvd
CVE	CVE-2024-29869	28 Jan 202521:31	–	cve
Cvelist	CVE-2024-29869 Apache Hive: Credentials file created with non restrictive permissions	28 Jan 202521:31	–	cvelist

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GO41173.json
osv	www.osv.dev/vulnerability/CVE-2024-29869
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-29869

08 Oct 2026 01:15Current

CVSS 3.15.5

EPSS0.00295

apache-hive credentials file temporary directory permissions information disclosure