[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fATPnpWYyCkHxg8o-Z8y3RddYaBp-taOmnZ6D4i9t2K8":3,"g5a-risk:CVE-2015-1772":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":62,"references":63,"referencesCount":89,"weaknesses":90,"weaknessesCount":99,"isActivelyExploited":100,"cisaInfo":15,"otxData":15,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":147,"notableEvents":148},"CVE-2015-1772","What is CVE-2015-1772?","The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows remote attackers to bypass authentication via a crafted LDAP request.","The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 an...","2015-12-21T11:59:00.14","2025-04-12T10:46:40.837",7.3,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.4,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":34,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":35,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","MEDIUM","PARTIAL",4.3,8.6,2.9,0.06828,[39,39,39,39,39,39,39],"High",[43,48,51,54,59],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ibm","infosphere_biginsights","3.0.0.0","cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"3.0.0.1","cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.1:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"3.0.0.2","cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.2:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"apache","hive","1.0.0","cpe:2.3:a:apache:hive:1.0.0:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":60,"criteria":61,"vulnerable":4},"1.1.0","cpe:2.3:a:apache:hive:1.1.0:*:*:*:*:*:*:*",5,[64,68,73,77,81,83,85,87],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fmail-archives.apache.org\u002Fmod_mbox\u002Fwww-announce\u002F201505.mbox\u002F%3CCAOpgucy52yzNN1FaRcxwhZmx8ZtNRjmK6V0Bxk4svAD-R1q70Q%40mail.gmail.com%3E","Apache",[],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21969546","Ibm",[72],"Vendor Advisory",{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034365","Securitytracker",[],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.cloudera.com\u002Fdocumentation\u002Fother\u002Fsecurity-bulletins\u002Ftopics\u002Fcsb_topic_1.html","Cloudera",[],{"url":65,"source":66,"tags":82},[],{"url":69,"source":70,"tags":84},[72],{"url":74,"source":75,"tags":86},[],{"url":78,"source":79,"tags":88},[],8,[91],{"id":92,"name":93,"description":94,"extendedDescription":95,"status":96,"abstraction":97,"structure":98},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2015-1772? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-1772, a high severity cyber security vulnerability from 2015. The LDAP implementation in HiveServer2 in Apache Hive before...","CVE-2015-1772, CVE-2015-1772 vulnerability, CVE-2015-1772 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, ibm security, apache security, infosphere_biginsights vulnerability, hive vulnerability","\u002Fwhat-is\u002Fcve-2015-1772",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-1772","Cybersecurity","CVE-2015-1772, CVE-2015-1772 vulnerability, CVE-2015-1772 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128,139],{"Operator":15,"Negate":15,"Nodes":129},[130],{"Operator":131,"Negate":15,"CPEMatch":132},"OR",[133,135,137],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"31342AF9-D73E-4B72-A98D-00E33A7088C1",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6771B5C2-7291-4A8F-A558-679768838EAE",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1875306C-CF9A-423D-9786-B880A5EAD2DB",{"Operator":15,"Negate":15,"Nodes":140},[141],{"Operator":131,"Negate":15,"CPEMatch":142},[143,145],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9EFCB996-0ED9-4FFC-BB76-8742306D47B9",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0139B115-DD15-4C84-ACA9-1F0426496288",[],[],{"lastModified":11,"cacheTime":150,"version":32},1792364595078,{"score":152,"band":153,"action":154,"scoredAt":155},48,"Medium","Plan remediation","2026-10-16T06:39:40.096606+00:00"]