https://bugzilla.redhat.com/show_bug.cgi?id=1509186
Bug ID: 1509186
Summary: CVE-2017-12625 hive: Information disclosure
vulnerability for column masking
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
me(a)coolsvap.net, moceap(a)hotmail.com,
pmackinn(a)redhat.com
Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1
expose an interface through which masking policies can be defined on tables or
views, e.g., using Apache Ranger. When a view is created over a given table,
the policy enforcement does not happen correctly on the table for masked
columns.
External References:
http://mail-archives.apache.org/mod_mbox/hive-user/201710.mbox/%3C3791103...
--
You are receiving this mail because:
You are on the CC list for the bug.