CVE-2014-0228: Improper Access Control

Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for 1 import and 2 export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI...

PT-2014-3547

Name of the Vulnerable Software and Affected Versions Apache Hive versions prior to 0.13.1 Description The issue concerns a problem with file permission checks in SQL standards based authorization mode. Specifically, it affects import and export statements, allowing remote authenticated users to...