CVE-2018-11777

Vulnerability

In Apache Hive versions 2.3.3 and earlier, and 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected if Ranger, Sentry, or SQL standard authorizer is not in use. This allows a malicious user to access local files and other resources on the HiveServer2 host [1][2].

Exploitation

An attacker must have valid Hive access to the HiveServer2 service. Without any authorizer configured, the attacker can exploit the lack of resource protection to read or write local files on the HiveServer2 machine. No special authentication bypass is required beyond normal Hive access [1][2].

Impact

Successful exploitation leads to unauthorized access to local resources (e.g., files) on the HiveServer2 host. This can result in information disclosure, data tampering, or potential privilege escalation depending on the resources accessed [1][2].

Mitigation

Upgrade Apache Hive to version 2.3.4 or 3.1.1, which contain the fix [2]. Alternatively, deploy an authorizer such as Apache Ranger, Apache Sentry, or SQL standard authorization to protect resources [1]. If upgrade is not immediately possible, consider restricting network access to HiveServer2.