Privilege Escalation

org.apache.ranger:ranger-hive-plugin is vulnerable to Privilege Escalation. An Incorrect Permission Assignment vulnerability exists in RangerHiveAuthorizer.java, which allows any user with SELECT capability to change the ownership of a Hive table...

Design/Logic Flaw

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue affects Apache Ranger Hive Plugin: from...

CVE-2021-40331 Permissions problem in the Apache Ranger Hive Plugin

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue affects Apache Ranger Hive Plugin: from...