com.nflabs.zeppelin:zeppelin-cli (>=0.1.0, <=0.1.2), com.nflabs.zeppelin:zeppelin-server (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.9.0)

org.apache.hive:hive-exec MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.nflabs.zeppelin:zeppelin-cli =0.1.0, =0.1.0, =0.1.0, =0.1.2 -...

com.github.sakserv:hadoop-mini-clusters (0.0.14), org.apache.atlas:falcon-bridge (>=0.7-incubating, <=2.5.0) +38 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.13.1)

org.apache.hive:hive-exec MAVEN version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.github.sakserv:hadoop-mini-clusters 0.0.14 - org.apache.atlas:falcon-bridge =0.7-incubating,...

io.druid.extensions.contrib:druid-orc-extensions (>=0.10.0, <=0.12.3), org.apache.tajo:tajo-hive (>=0.11.2, <=0.11.3) potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.0.0)

org.apache.hive:hive-exec MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - io.druid.extensions.contrib:druid-orc-extensions =0.10.0, =0.11.2, =0.11.3 Source cves: CVE-2024-29869 Source...

org.apache.hive.hcatalog:hive-hcatalog-core (3.0.0), org.apache.hive.hcatalog:hive-hcatalog-pig-adapter (3.0.0) +18 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (3.0.0)

org.apache.hive:hive-exec MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hive.hcatalog:hive-hcatalog-core 3.0.0 - org.apache.hive.hcatalog:hive-hcatalog-pig-adapter 3.0.0 ...

org.apache.hudi:hudi-adb-sync (>=0.12.0, <=1.0.0-beta1), org.apache.hudi:hudi-dla-sync (>=0.9.0, <=0.11.1) +8 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.1)

org.apache.hive:hive-exec MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hudi:hudi-adb-sync =0.12.0, =0.9.0, =0.14.0, =0.14.0, =0.9.0, =0.14.0, =0.14.0, =0.11.0-rc3,...

org.apache.drill.contrib.storage-hive:drill-hive-exec-shaded (>=1.13.0, <=1.17.0), org.apache.drill.contrib.storage-hive:drill-storage-hive-core (1.16.0) potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.2)

org.apache.hive:hive-exec MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.drill.contrib.storage-hive:drill-hive-exec-shaded =1.13.0, =1.17.0 -...

com.datasalt.pangool:pangool-examples (>=0.60.0, <=0.70), com.esri.hadoop:spatial-sdk-hive (>=1.0.1, <=1.0.2) +34 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.10.0)

org.apache.hive:hive-exec MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.datasalt.pangool:pangool-examples =0.60.0, =1.0.1, =0.6, =0.6, =0.6, =0.6, =1.11.2, =0.5.5, =0.2.2, =0.2...

com.nflabs.zeppelin:zeppelin-cli (0.2.0), com.nflabs.zeppelin:zeppelin-distribution (>=0.2.0, <=0.3.3) +18 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.11.0)

org.apache.hive:hive-exec MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.nflabs.zeppelin:zeppelin-cli 0.2.0 - com.nflabs.zeppelin:zeppelin-distribution =0.2.0, =0.3.0, =1.2.0,...

org.apache.hive:hive-cli (0.8.1), org.apache.hive:hive-contrib (0.8.1) +4 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.8.1)

org.apache.hive:hive-exec MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hive:hive-cli 0.8.1 - org.apache.hive:hive-contrib 0.8.1 - org.apache.hive:hive-hbase-handler 0.8....

co.elastic.release-test:dist (9.0.4), co.elastic.release-test:elasticsearch-hadoop-hive (9.0.4) +79 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (3.1.3)

org.apache.hive:hive-exec MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - co.elastic.release-test:dist 9.0.4 - co.elastic.release-test:elasticsearch-hadoop-hive 9.0.4 -...

io.github.jzdayz:hive (2.0), nl.basjes.parse.useragent:yauaa-hive (>=5.9, <=5.13) +21 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (3.1.1)

org.apache.hive:hive-exec MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - io.github.jzdayz:hive 2.0 - nl.basjes.parse.useragent:yauaa-hive =5.9, =5.13 -...

nl.basjes.parse.httpdlog:httpdlog-serde (5.11.0), nl.basjes.parse.useragent:yauaa-hive (>=7.26.1, <=7.28.1) +20 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (>=4.0.0-alpha-1, <=4.0.0)

org.apache.hive:hive-exec MAVEN version =4.0.0-alpha-1, =7.26.1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0 and more Source...

com.alibaba.blink:flink-hcatalog (>=blink-3.2.0, <=1.5.1), com.esri.hadoop:spatial-sdk-hive (1.1) +26 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.12.0)

org.apache.hive:hive-exec MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.alibaba.blink:flink-hcatalog =blink-3.2.0, =1.11.2, =1.11.2, =0.2.7, =1.2.9, =1.2.9, =0.9.0-milestone-1,...

ai.h2o:h2o-orc-parser (>=3.18.0.9, <=3.46.0.12), com.linkedin.tony:tony-cli (>=0.1.5, <=0.3.3) +3 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (1.1.0)

org.apache.hive:hive-exec MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - ai.h2o:h2o-orc-parser =3.18.0.9, =0.1.5, =0.1.5, =0.11.0, =0.11.1 Source cves: CVE-2024-29869 Source advisory...

org.apache.spark:spark-hive-thriftserver_2.12 (3.0.0-preview2), org.apache.spark:spark-hive_2.12 (3.0.0-preview2) +4 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.6)

org.apache.hive:hive-exec MAVEN version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.spark:spark-hive-thriftserver2.12 3.0.0-preview2 - org.apache.spark:spark-hive2.12 3.0.0-preview2 ...

nl.basjes.parse.httpdlog:httpdlog-serde (5.11.0), nl.basjes.parse.useragent:yauaa-hive (>=7.26.1, <=7.28.1) +20 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (>=4.0.0-alpha-1, <=4.0.0)

org.apache.hive:hive-exec MAVEN version =4.0.0-alpha-1, =7.26.1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0 and more Source...

ai.chronon:flink_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:online_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +180 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.7)

org.apache.hive:hive-exec MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - ai.chronon:flink2.12 =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev,...

CVE-2024-29869

Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive information written into this file. Users are recommended to...

CVE-2024-29869

creationtimestamp| type| source ---|---|--- 2025-01-28 21:36:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113908135028434980 2025-01-28 21:52:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgtgv2wfd62q 2025-01-28 22:15:36+00:00| seen|...

CVE-2024-29869 Apache Hive: Credentials file created with non restrictive permissions

Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive information written into this file. Users are recommended to...