CVE-2013-2192

CVE-2013-2192 describes a vulnerability in Apache Hadoop 1.x and 2.x, affecting the RPC protocol when Kerberos security is enabled. A man-in-the-middle attacker can exploit this by forcing a downgrade to simple authentication, thereby disabling bidirectional authentication and potentially gaining sensitive information. This vulnerability has a low CVSS score of 3.2, indicating an adjacent attack vector with high attack complexity, leading to partial confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.