Unscored severity · published May 29, 2014
CVE-2013-2193
Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HB
Hbase · Apache
0.92.0; 0.92.1; 0.92.2; 0.94.0; 0.94.1; 0.94.2; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2193
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2193
osvdb.org
http://osvdb.org/96615
seclists.org
http://seclists.org/fulldisclosure/2013/Aug/250
www.cloudera.com
https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html
More from Hbase
8.1
CVE-2018-8025
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP
7.5
CVE-2019-15544
An issue was discovered in the protobuf crate before 2.6.0 for Rust
7.5
CVE-2019-0212
In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server
7.3
CVE-2015-1836
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect…
6.5
CVE-2026-49326
Apache HBase: Missing scanner instance owner check in thrift delegation service