Lucene search
GoogleOSV:GHSA-54G4-5CF6-HJP3HistoryFeb 09, 2022 - 12:48 a.m.
Apache Hive Information Exposure and Observable Timing Discrepancy
2022-02-0900:48:54
Google
osv.dev
6
0.001 Low
EPSS
Percentile
29.4%
Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8
Related
osv
osv
CVE-2020-1926
2021-03-16 13:15:11
cvelist
cvelist
CVE-2020-1926 Timing attack in Cookie signature verification
2021-03-16 13:00:16
cve
cve
CVE-2020-1926
2021-03-16 13:15:11
nvd
nvd
CVE-2020-1926
2021-03-16 13:15:11
veracode
veracode
Information Disclosure
2022-02-11 04:56:05
prion
prion
Code injection
2021-03-16 13:15:00
github
github
Apache Hive Information Exposure and Observable Timing Discrepancy
2022-02-09 00:48:54
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00