com.hindog.grid:grid-executor-examples_2.11 (>=1.1.0, <=2.0.1) potentially affected by CVE-2020-1926 via org.apache.hive:hive (2.1.1)

org.apache.hive:hive MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive and may be impacted: - com.hindog.grid:grid-executor-examples2.11 =1.1.0, =2.0.1 Source cves: CVE-2020-1926 Source advisory: GHSA-54G4-5CF6-HJ...

com.hindog.grid:grid-executor-examples_2.11 (>=1.1.0, <=2.0.1) potentially affected by CVE-2020-1926 via org.apache.hive:hive (2.1.1)

org.apache.hive:hive MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive and may be impacted: - com.hindog.grid:grid-executor-examples2.11 =1.1.0, =2.0.1 Source cves: CVE-2020-1926 Source advisory:...

CVE-2020-1926 Timing attack in Cookie signature verification

Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8...

CVE-2020-1926

CVE-2020-1926 affects Apache Hive: cookie signature verification used a non-constant-time comparison, enabling timing attacks that could recover another user’s cookie signature. The issue is addressed in Apache Hive 2.3.8. Connected references describe the vulnerability as an information-disclosu...