Advisory details:
github_osv / GHSA-pxv5-5vmp-3jj4
| Advisory ID | github_osv/GHSA-pxv5-5vmp-3jj4 |
| Aliases |
CVE-2013-2192
|
| Summary | Improper Authentication in Apache Hadoop The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| CWE-287 | Improper Authentication |
| System | Score | Found at |
|---|---|---|
| generic_textual | LOW |
| Reference id | Reference type | URL |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2014-0400.html | ||
| http://seclists.org/fulldisclosure/2013/Aug/251 | ||
| https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html | ||
| CVE-2013-2192 | https://nvd.nist.gov/vuln/detail/CVE-2013-2192 | |
| RHSA-2014-0037.html | http://rhn.redhat.com/errata/RHSA-2014-0037.html |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.