未評価
Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow reco...
CVE-2020-1926
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- patch issues.apache.org
- patch lists.apache.org