← Vulnerability feed

Vulnerability record · CVE-2021-34538 · published 16 July 2022

CVE-2021-34538: Apache hive missing authentication for critical function vulnerability

Apache · Hive

Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.

7.5 CVSS 3.1 High EPSS 1.8% · top 23.0% CWE-306 · Missing authentication for critical function
7.5CVSS 3.1 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://lists.apache.org/thread/oqqgnhz4c6nxsfd0xstosnk0g15f7354 Mailing ListVendor Advisory
https://lists.apache.org/thread/oqqgnhz4c6nxsfd0xstosnk0g15f7354 Mailing ListVendor Advisory

Track CVE-2021-34538 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-49845Apache hive code injection vulnerabilitySQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with acc…EPSS 0.89%9.8CVE-2018-21234Jodd deserialization of untrusted data vulnerabilityJodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.EPSS 8.3%9.1CVE-2026-55976Apache hive server-side request forgery (ssrf) vulnerabilityServer-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TA…EPSS 1.0%9.1CVE-2018-1282Apache hive sql injection vulnerabilityThis vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup th…EPSS 5.5%8.3CVE-2022-41137Apache hive deserialization of untrusted data vulnerabilityApache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is un…EPSS 1.6%8.3CVE-2015-7521Apache hive improper authentication vulnerabilityThe authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, …EPSS 6.1%8.1CVE-2018-11777Apache hive vulnerabilityIn Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry …EPSS 2.3%7.5CVE-2020-13949Apache hive uncontrolled resource consumption vulnerabilityIn Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leadin…EPSS 6.8%

Source: NIST National Vulnerability Database (record CVE-2021-34538), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.