In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.
| Software | From | Fixed in |
|---|---|---|
| apache / hive | - | 2.3.3.x |
| apache / hive | 3.0.0 | 3.1.0.x |
org.apache.hive / hive-exec
|
3.0.0 | 3.1.1 |
org.apache.hive / hive-exec
|
- | 2.3.4 |