Originally published at HOL CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation TL;DR: HiveServer2's SAML HTTP path accepted a forged Authorization: Bearer token as a real session. An unauthenticated attacker who can reach /cliservice can impersonate any Hive user. This is not the Kerberos or LDAP default. It needs HTTP transport and... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
SOCIAL SHARE CARD GENERATOR