CVE-2013-2192
Published Jan 24, 2014
Last updated 8 years ago
Overview
- Description
- The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.2
- Impact score
- 4.9
- Exploitability score
- 3.2
- Vector string
- AV:A/AC:H/Au:N/C:P/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-287
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "029481B4-F0BC-4C44-B5DB-4AE66AE92334"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "501DBE03-139A-46E9-BFD5-B7D8245AD2C7"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD95328D-ED9A-4889-96E7-C7B3041745FB"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65899B21-D364-4E6D-8E82-1D408BA4E2A6"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5512B2DD-5136-4215-899C-FB48AFA8A2CC"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68A3493C-3D69-46A9-920A-8BB44B090609"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74588026-F427-4E31-89FA-FFCE5B2EC108"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:0.23.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FD4F0BA-614B-47A9-B916-DD1400FCE532"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCC82E5C-775B-4BB0-AE38-6CF546CD6A4F"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA4A72DC-B207-4013-ADED-BDEEE3940486"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D85AFEF0-A4A8-435A-8774-C838A511B1A6"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "070C91FA-BB2B-4005-83CC-9463A875AE9F"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED5CDD91-B7D8-478F-9028-38E8972B534A"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9859C9ED-3A60-4320-A140-0F88797C3A25"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F755C59-AF8F-46A9-ACAE-07A4028CA715"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72E99C48-A1BC-48A8-88E3-2653FE310693"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6054120C-B47E-4DD5-977E-E097F0525F91"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:2.0.0:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "227941BD-D769-45AD-9D61-7FCA3C2264FA"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:2.0.1:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18BF490A-0865-47C0-A143-0991B40BD259"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:2.0.2:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E091799F-203D-4C52-839E-E798770C0287"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:2.0.3:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80E53689-C56C-4104-B510-CB4116B898CB"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:2.0.4:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "591921C3-F7EA-402E-9C36-2EADF0417C72"
},
{
"criteria": "cpe:2.3:a:apache:hadoop:2.0.5:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FA774A9-81B3-4303-B254-C802B4DC8004"
}
],
"operator": "OR"
}
]
}
]