Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Apache Hive may permit unauthorized data access

published 1 month ago

Summary

The Apache Hive package version 4.0.0-r1 can be tricked into exposing data it should protect. The problem has been fixed in newer releases of Apache Hive. Upgrade to the latest version as soon as possible to close the gap.

What to do

Update cleanstart apache-hive to version 4.0.0-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	apache-hive	< 4.0.0-r1 Fix: upgrade to 4.0.0-r1

Original advisory text

Security fix for CVE-2023-20861 applied in: apache-hive 4.0.0-r1

Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2023-20861 URL
https://nvd.nist.gov/vuln/detail/CVE-2023-20861 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-VG05953 · OSV

Track software like this

Free during beta