https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:46:38.580387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-1926 CVE-2020-1926 — Timing attack in Cookie signature verification 2026-10-06T05:46:38.597603+00:00

Affected: Apache Software Foundation Apache Hive

Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue was addressed in Apache Hive 2.3.8