CVE-2020-1926

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 16/03/2021 Updated: 05/08/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache hive

Description: Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks This could allow recovery of another users cookie signature The issue was addressed in Apache Hive 238 This issue is being tracked as HIVE-22708 Credit: Apache Hive would like to thank S Wasin for rep ...

CWE-203 https://lists.apache.org/thread.html/rd186eedff68102ba1e68059a808101c5aa587e11542c7dcd26e7b9d7%40%3Cuser.hive.apache.org%3E https://issues.apache.org/jira/browse/HIVE-22708 https://nvd.nist.gov http://seclists.org/oss-sec/2021/q1/186

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-1926

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect