mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-29 05:56:17 +00:00
205 lines
7.5 KiB
JSON
205 lines
7.5 KiB
JSON
{
|
|
"id": "CVE-2013-2192",
|
|
"sourceIdentifier": "secalert@redhat.com",
|
|
"published": "2014-01-24T18:55:04.243",
|
|
"lastModified": "2017-03-24T01:59:00.453",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "La implementaci\u00f3n del protocolo RPC en Apache Hadoop v2.x anterior a v2.0.6-alpha, v0.23.x anterior a v0.23.9, y v1.x anterior a v1.2.1, cuando las caracter\u00edsticas de seguridad de Kerberos est\u00e1n habilitadas, permite a atacantes man in the middle deshabilitar la autenticaci\u00f3n bidireccional y obtener informaci\u00f3n sensible forzando una desactualizaci\u00f3n a una autenticaci\u00f3n simple."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:N",
|
|
"accessVector": "ADJACENT_NETWORK",
|
|
"accessComplexity": "HIGH",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 3.2
|
|
},
|
|
"baseSeverity": "LOW",
|
|
"exploitabilityScore": 3.2,
|
|
"impactScore": 4.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-287"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "029481B4-F0BC-4C44-B5DB-4AE66AE92334"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "501DBE03-139A-46E9-BFD5-B7D8245AD2C7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AD95328D-ED9A-4889-96E7-C7B3041745FB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "65899B21-D364-4E6D-8E82-1D408BA4E2A6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5512B2DD-5136-4215-899C-FB48AFA8A2CC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "68A3493C-3D69-46A9-920A-8BB44B090609"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "74588026-F427-4E31-89FA-FFCE5B2EC108"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:0.23.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1FD4F0BA-614B-47A9-B916-DD1400FCE532"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.0.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CCC82E5C-775B-4BB0-AE38-6CF546CD6A4F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.0.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BA4A72DC-B207-4013-ADED-BDEEE3940486"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D85AFEF0-A4A8-435A-8774-C838A511B1A6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "070C91FA-BB2B-4005-83CC-9463A875AE9F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "ED5CDD91-B7D8-478F-9028-38E8972B534A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.1.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9859C9ED-3A60-4320-A140-0F88797C3A25"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.1.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0F755C59-AF8F-46A9-ACAE-07A4028CA715"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.1.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "72E99C48-A1BC-48A8-88E3-2653FE310693"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:1.2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6054120C-B47E-4DD5-977E-E097F0525F91"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:2.0.0:alpha:*:*:*:*:*:*",
|
|
"matchCriteriaId": "227941BD-D769-45AD-9D61-7FCA3C2264FA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:2.0.1:alpha:*:*:*:*:*:*",
|
|
"matchCriteriaId": "18BF490A-0865-47C0-A143-0991B40BD259"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:2.0.2:alpha:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E091799F-203D-4C52-839E-E798770C0287"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:2.0.3:alpha:*:*:*:*:*:*",
|
|
"matchCriteriaId": "80E53689-C56C-4104-B510-CB4116B898CB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:2.0.4:alpha:*:*:*:*:*:*",
|
|
"matchCriteriaId": "591921C3-F7EA-402E-9C36-2EADF0417C72"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:hadoop:2.0.5:alpha:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9FA774A9-81B3-4303-B254-C802B4DC8004"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://rhn.redhat.com/errata/RHSA-2014-0037.html",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://rhn.redhat.com/errata/RHSA-2014-0400.html",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://seclists.org/fulldisclosure/2013/Aug/251",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/57915",
|
|
"source": "secalert@redhat.com"
|
|
},
|
|
{
|
|
"url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html",
|
|
"source": "secalert@redhat.com"
|
|
}
|
|
]
|
|
} |