CVE-2023-35393 is a medium-severity spoofing vulnerability affecting Microsoft Azure HDInsight's Apache Hive. It carries a CVSS score of 4.5, indicating a network-based attack requiring high privileges and user interaction, with a potential impact of high integrity compromise. While not actively exploited (KEV: No) and lacking public exploit code, it has garnered significant community discussion and media coverage, suggesting awareness of its potential.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:azure_hdinsight:-:*:*:*:*:*:*:* | ||
>= 1.0, < 2307201242CPE match | cpe:2.3:a:microsoft:azure_hdinsight:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.