Lucene search
Veracode Vulnerability DatabaseVERACODE:41143HistoryJul 07, 2023 - 6:34 a.m.
Improper Input Validation
2023-07-0706:34:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
apache airflow
apache hive
input validation
security checks
remote code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
70.5%
apache_airflow_providers_apache_hive is vulnerable to Improper Input Validation. The vulnerability exists in _prepare_cli_cmd function of hive.py, which allows an attacker with access to modify connection details to bypass security checks and cause remote code executions.
Related
osv
osv
CVE-2023-35797
2023-07-03 10:15:09
Apache Airflow Hive Provider Beeline remote code execution with Principal
2023-07-03 12:30:34
CVE-2023-37415
2023-07-13 08:15:10
cvelist
cvelist
cve
cve
CVE-2023-35797
2023-07-03 10:15:09
CVE-2023-37415
2023-07-13 08:15:10
cnvd
cnvd
Apache Hive Provider Code Execution Vulnerability
2023-07-05 00:00:00
nvd
nvd
CVE-2023-35797
2023-07-03 10:15:09
CVE-2023-37415
2023-07-13 08:15:10
prion
prion
Input validation
2023-07-03 10:15:00
Input validation
2023-07-13 08:15:00
github
github
Apache Airflow Hive Provider Beeline remote code execution with Principal
2023-07-03 12:30:34
Apache Airflow Apache Hive Provider Improper Input Validation vulnerability
2023-07-13 09:30:28
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
70.5%
Related for VERACODE:41143