Improper Authentication

Apache Hive is vulnerable to improper authentication. The vulnerability is due to improper validation of SAML bearer tokens, which allows an unauthenticated network attacker to forge an Authorization: Bearer token and authenticate as an arbitrary Hive user, thereby obtaining an authenticated...