[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249982

 
 

909

 
 

195748

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-2193Date: (C)2014-05-30   (M)2023-12-22


Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 3.2
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: ADJACENT_NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
http://seclists.org/fulldisclosure/2013/Aug/250
OSVDB-96615
https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html

CPE    13
cpe:/a:apache:hbase:0.94.1
cpe:/a:apache:hbase:0.92.2
cpe:/a:apache:hbase:0.94.0
cpe:/a:apache:hbase:0.92.1
...
CWE    1
CWE-287

© SecPod Technologies