Security Bulletin: Hortonworks DataFlow product has log messages vulnerable to arbitrary code execution, denial of service, and remote code execution due to Apache Log4j vulnerabilities [CVE-2021-44228], [CVE-2021-45105], and [CVE-2021-45046]

Summary Hortonworks DataFlow product for IBM has log messages vulnerable to arbitrary code execution, denial of service, and remote code execution due to Apache Log4j vulnerabilities CVE-2021-44228, CVE-2021-45105, and CVE-2021-45046. Vulnerability Details CVEID:CVE-2021-44228 DESCRIPTION: Apache...

Security Bulletin: Cloudera Data Platform is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary IBM products for Cloudera Data Platform and Hortonworks Data Platform are affected by critical Apache Log4j vulnerability CVE-2021-44228. A malicious user could exploit this vulnerability to run arbitrary code as the user or service account running the affected software. The fix includes...

Security Bulletin: Hortonworks Technical Alert: CVE-2018-1284, CVE-2018-1282, CVE-2018-1315 fixes for Hive

Summary IBM Technical Support would like to make you aware of a potential issue you may encounter. Please review the details below and take action accordingly. Vulnerability Details COMPONENT : Hive/Hive2 VERSION : All HDP versions from HDP 1.0.0 to HDP 2.6.4 REFERENCE : CVE-2018-1284 PROBLEM :...

Security Bulletin: Hortonworks Advisory on MeltDown and Spectre Vulnerabilities

Summary Recent news reports have been issued detailing security issues around Intel and some AMD and ARM microprocessors. See Reference links below. Since these vulnerabilities are at the OS/Hardware level, currently Hortonworks does not anticipate changes in our products. However, we strongly...

CVE-2014-0228: Apache Hive Authorization vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2014-0228: Apache Hive Authorization vulnerability Severity: Moderate Vendor: The Apache Software Foundation Versions affected: Apache Hive 0.13.0 Users affected: Users who have enabled SQL standards based authorization mode. Description: In SQL...