high8.8
CVE-2024-45199
insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability.
Impact
insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.
Affected products
| Product | Affected versions |
|---|---|
| Insightsoftware Hive JDBC | through 2.6.13 |
Versions were read from the advisory text. No structured product data has been published for this record yet.