[
https://issues.apache.org/jira/browse/HIVE-28653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Krisztian Kasa updated HIVE-28653:
----------------------------------
Fix Version/s: 4.1.0
Resolution: Fixed
Status: Resolved (was: Patch Available)
Merged to master. Thanks for the review [~zabetak] and [~okumin].
> Jetty version disclosure in Hive
> --------------------------------
>
> Key: HIVE-28653
> URL: https://issues.apache.org/jira/browse/HIVE-28653
> Project: Hive
> Issue Type: Bug
> Components: Hive
> Affects Versions: 4.0.1
> Reporter: Henri Biestro
> Assignee: Krisztian Kasa
> Priority: Major
> Labels: pull-request-available
> Fix For: 4.1.0
>
>
> There are various instance of Jetty that can be started within Hive (Web UI,
> property servlet); they should not expose the Jetty version in the header
> since this is considered a (low) security issue.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
