CVE-2013-2192
Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 3.2 | AV:A/AC:H/Au:N/C:P/I:P/A:N | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Apache>>Hadoop >> Version 0.23.0
- Apache>>Hadoop >> Version 0.23.0 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.1
- Apache>>Hadoop >> Version 0.23.1 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.3
- Apache>>Hadoop >> Version 0.23.3 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.4
- Apache>>Hadoop >> Version 0.23.4 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.5
- Apache>>Hadoop >> Version 0.23.5 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.6
- Apache>>Hadoop >> Version 0.23.6 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.7
- Apache>>Hadoop >> Version 0.23.7 (Open CPE detail)
Apache>>Hadoop >> Version 0.23.8
- Apache>>Hadoop >> Version 0.23.8 (Open CPE detail)
Apache>>Hadoop >> Version 1.0.0
- Apache>>Hadoop >> Version 1.0.0 (Open CPE detail)
Apache>>Hadoop >> Version 1.0.1
- Apache>>Hadoop >> Version 1.0.1 (Open CPE detail)
Apache>>Hadoop >> Version 1.0.2
- Apache>>Hadoop >> Version 1.0.2 (Open CPE detail)
Apache>>Hadoop >> Version 1.0.3
- Apache>>Hadoop >> Version 1.0.3 (Open CPE detail)
Apache>>Hadoop >> Version 1.0.4
- Apache>>Hadoop >> Version 1.0.4 (Open CPE detail)
Apache>>Hadoop >> Version 1.1.0
- Apache>>Hadoop >> Version 1.1.0 (Open CPE detail)
Apache>>Hadoop >> Version 1.1.1
- Apache>>Hadoop >> Version 1.1.1 (Open CPE detail)
Apache>>Hadoop >> Version 1.1.2
- Apache>>Hadoop >> Version 1.1.2 (Open CPE detail)
Apache>>Hadoop >> Version 1.2.0
- Apache>>Hadoop >> Version 1.2.0 (Open CPE detail)
Apache>>Hadoop >> Version 2.0.0
- Apache>>Hadoop >> Version 2.0.0 (Open CPE detail)
Apache>>Hadoop >> Version 2.0.1
- Apache>>Hadoop >> Version 2.0.1 (Open CPE detail)
Apache>>Hadoop >> Version 2.0.2
- Apache>>Hadoop >> Version 2.0.2 (Open CPE detail)
Apache>>Hadoop >> Version 2.0.3
- Apache>>Hadoop >> Version 2.0.3 (Open CPE detail)
Apache>>Hadoop >> Version 2.0.4
- Apache>>Hadoop >> Version 2.0.4 (Open CPE detail)
Apache>>Hadoop >> Version 2.0.5
- Apache>>Hadoop >> Version 2.0.5 (Open CPE detail)
References
https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html
Tags : x_refsource_CONFIRM
Tags : x_refsource_CONFIRM
2025©
tesweb SA
