What is the CVSS score of CVE-2013-2193?

CVE-2013-2193 has a CVSS 2.0 base score of 4.3 (Medium). CVSS vector: AV:A/AC:H/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.2%.

Hbase CVE-2013-2193

MEDIUM

Improper Authentication (CWE-287)

2014-05-29 secalert@redhat.com

Apache Authentication Bypass Hbase

4.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:A/AC:H/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:H/Au:N/C:P/I:P/A:P

Attack Vector

Adjacent

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 29, 2014 - 14:19 cve.org

MEDIUM 4.3

DescriptionCVE.org

Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors. Affected products include: Apache Hbase. Version information: before 0.92.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.