com.webank.wedatasphere.linkis:linkis-engineplugin-hive (1.0.2), org.apache.hive:hive-pre-upgrade (>=4.0.0-alpha-2, <=4.0.0-beta-1) +3 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (2.3.3)

🗓️ 29 Jan 2025 00:31:54Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 4 Views

Vulnerability in hive-exec affecting multiple linkis and hive packages.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	27 Jul 202610:45	–	ibm
IBM Security Bulletins	Security Bulletin: Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly, which affects IBM watsonx.data	29 Aug 202514:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® Big SQL on IBM Software Hub.	26 Jun 202614:50	–	ibm
BDU FSTEC	Apache Hive Permission Unauthorized Access	4 Feb 202500:00	–	bdu_fstec
Chainguard	CVE-2024-29869 vulnerabilities	28 Jan 202522:15	–	cgr
Circl	CVE-2024-29869	28 Jan 202521:36	–	circl
CNNVD	Apache Hive 安全漏洞	28 Jan 202500:00	–	cnnvd
CNVD	Apache Hive Authorization Issues Vulnerability	18 Feb 202500:00	–	cnvd
CVE	CVE-2024-29869	28 Jan 202521:31	–	cve
Cvelist	CVE-2024-29869 Apache Hive: Credentials file created with non restrictive permissions	28 Jan 202521:31	–	cvelist

29 Jan 2025 19:27Current

CVSS 3.15.5

EPSS0.00295

SSVC

hive-exec linkis-engineplugin-hive linkis-metadata-manager-service-hive linkis-metadata-query-service-hive hive-pre-upgrade