Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0 should upgrade to 3.1.0.
Vulnerable Systems:
Hive SQL in Hive CLI
CVE Information:
Disclosure Timeline:
Published Date:7/14/2020
In today's hyper-connected world, most of us now take care of our daily tasks with the help of digital tools, which includes online banking.
Explore how to prevent supply chain attacks, which exploit the trust relationship between vendor and customer, giving attackers elevated privileges and access to internal resources.
Fortra's security experts look ahead at 2023's cybersecurity landscape.
Copyright © Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners. Privacy Policy
SecuriTeam
Beyond Security
