CVE-2018-1284

Low

Advisory

Published 21 Nov 2018In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.022; 81st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4; of 17,781 indexed, latest versions
Container images: 2; deployed by those charts
Fix available: 2 of 2; affected packages

Exposure of Sensitive Information to an Unauthorized Actor in Apache hive

Carried by container images the latest versions of 4 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
hive-execmaven	2.3.2	2.3.3	2
hive-servicemaven	2.3.2	2.3.3	2

OSV records: GHSA-rxmr-c9jm-7mm8

Charts affected

4 by stars

Chart

Latest

Affected images

Radar Score

hivedmwm-bigdata

0.1.6

2 of 5 See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-1284.

Container image	Digest	Package	Fixed in
bde2020/hive :2.3.2-postgresql-metastore	620267768985	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3
gradiant/hive :2.3.2-postgresql-metastore	aae4f8a21f8b	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3

Open the chart page →

20,837

hive-metastoredmwm-bigdata

0.1.3

1 of 2 See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-1284.

Container image	Digest	Package	Fixed in
bde2020/hive :2.3.2-postgresql-metastore	620267768985	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3

Open the chart page →

6,882

hivegradiant-bigdata

0.1.6

2 of 5 See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2018-1284.

Container image	Digest	Package	Fixed in
bde2020/hive :2.3.2-postgresql-metastore	620267768985	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3
gradiant/hive :2.3.2-postgresql-metastore	aae4f8a21f8b	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3

Open the chart page →

20,837

hive-metastoregradiant-bigdata

0.1.3

1 of 2 See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2018-1284.

Container image	Digest	Package	Fixed in
bde2020/hive :2.3.2-postgresql-metastore	620267768985	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3

Open the chart page →

6,882

Container images carrying it

2 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bde2020/hive :2.3.2-postgresql-metastore	620267768985	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3	4
gradiant/hive :2.3.2-postgresql-metastore	aae4f8a21f8b	hive-exec@2.3.2 hive-service@2.3.2	2.3.3 2.3.3	2