Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4903
HistoryAug 14, 2017 - 4:39 a.m.

Collision Attack

2017-08-1404:39:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

Apache Hive is vulnerable to collision attacks. The vulnerability is possible because it uses the weak hashing algorithm, SHA-1, in src/java/org/apache/hive/service/CookieSigner.java and src/java/org/apache/hadoop/hive/ql/udf/generic/GenericUDFMaskHash.java allowing the attackers to easily perform collsion attacks. This is related to CVE-2005-4900.