A vulnerability, which was classified as problematic, was found in Apache Hive 2.2.x/3.x. Affected is the function Arrays.equals of the component LlapSignerImpl. The manipulation leads to improper validation of integrity check value.

This vulnerability is traded as CVE-2024-23953. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.