CVE-2013-2193: Apache Hbase

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors.

Affected products

• Apache Hbase: version 0.92.0 only; version 0.92.1 only; version 0.92.2 only; version 0.94.0 only; version 0.94.1 only; version 0.94.2 only; …

Published 2014-05-29. Last modified 2026-06-16.