Vulnerability in Apache Hive
CVE-2024-29869
Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly. Any unauthorized user having access to the directory can read the sensitive infor…
EPSS: 0.003 (17.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Apache Hive
- Apache Software Foundation Hive — versions 1.1.0
Weakness classification (CWE)
References
- security@apache.org (Product, product)
- security@apache.org (Patch, patch)
- security@apache.org (issue-tracking, Issue Tracking)
- security@apache.org (vendor-advisory, Mailing List, Vendor Advisory)
- af854a3a-2127-422b-91ae-364da2661108 (Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2024-29869?
- CVE-2024-29869 is a medium-severity vulnerability in Apache Hive, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 5.5/10. Published 2025-01-28.
- How severe is CVE-2024-29869?
- Medium severity. CVSS v3 base score is 5.5 out of 10.