CVE-2013-2192

{"id": "CVE-2013-2192", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.2, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.2, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-24T18:55:04.243", "references": [{"url": "http://rhn.redhat.com/errata/RHSA-2014-0037.html", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0400.html", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/fulldisclosure/2013/Aug/251", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/57915", "source": "secalert@redhat.com"}, {"url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0037.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0400.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2013/Aug/251", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/57915", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication."}, {"lang": "es", "value": "La implementaci\u00f3n del protocolo RPC en  Apache Hadoop v2.x anterior a v2.0.6-alpha, v0.23.x anterior a v0.23.9, y v1.x anterior a v1.2.1, cuando las caracter\u00edsticas de seguridad de Kerberos est\u00e1n habilitadas, permite a atacantes man in the middle deshabilitar la autenticaci\u00f3n bidireccional y obtener informaci\u00f3n sensible forzando una desactualizaci\u00f3n a una autenticaci\u00f3n simple."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:hadoop:0.23.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "029481B4-F0BC-4C44-B5DB-4AE66AE92334"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "501DBE03-139A-46E9-BFD5-B7D8245AD2C7"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD95328D-ED9A-4889-96E7-C7B3041745FB"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65899B21-D364-4E6D-8E82-1D408BA4E2A6"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5512B2DD-5136-4215-899C-FB48AFA8A2CC"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68A3493C-3D69-46A9-920A-8BB44B090609"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74588026-F427-4E31-89FA-FFCE5B2EC108"}, {"criteria": "cpe:2.3:a:apache:hadoop:0.23.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FD4F0BA-614B-47A9-B916-DD1400FCE532"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCC82E5C-775B-4BB0-AE38-6CF546CD6A4F"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA4A72DC-B207-4013-ADED-BDEEE3940486"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D85AFEF0-A4A8-435A-8774-C838A511B1A6"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "070C91FA-BB2B-4005-83CC-9463A875AE9F"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED5CDD91-B7D8-478F-9028-38E8972B534A"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9859C9ED-3A60-4320-A140-0F88797C3A25"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F755C59-AF8F-46A9-ACAE-07A4028CA715"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72E99C48-A1BC-48A8-88E3-2653FE310693"}, {"criteria": "cpe:2.3:a:apache:hadoop:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6054120C-B47E-4DD5-977E-E097F0525F91"}, {"criteria": "cpe:2.3:a:apache:hadoop:2.0.0:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "227941BD-D769-45AD-9D61-7FCA3C2264FA"}, {"criteria": "cpe:2.3:a:apache:hadoop:2.0.1:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18BF490A-0865-47C0-A143-0991B40BD259"}, {"criteria": "cpe:2.3:a:apache:hadoop:2.0.2:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E091799F-203D-4C52-839E-E798770C0287"}, {"criteria": "cpe:2.3:a:apache:hadoop:2.0.3:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80E53689-C56C-4104-B510-CB4116B898CB"}, {"criteria": "cpe:2.3:a:apache:hadoop:2.0.4:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "591921C3-F7EA-402E-9C36-2EADF0417C72"}, {"criteria": "cpe:2.3:a:apache:hadoop:2.0.5:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FA774A9-81B3-4303-B254-C802B4DC8004"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}