CVE-2017-12625 is a vulnerability in Apache Hive
Published on November 1, 2017
Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns.
Products Associated with CVE-2017-12625
Want to know whenever a new CVE is published for Apache Hive? stack.watch will email you.
Affected Versions
Apache Software Foundation Apache Hive:- Version 2.1.x before 2.1.2 is affected.
- Version 2.2.x before 2.2.1 is affected.
- Version 2.3.0 is affected.
Exploit Probability
EPSS
0.47%
Percentile
64.05%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.