{"action":"Upgrade org.apache.hadoop:hadoop-common to 0.23.9 (0.x) or 2.0.6-alpha (2.x) or later.","affected":[{"fixed":"2.0.6-alpha","introduced":"2.0.0"},{"fixed":"0.23.9","introduced":"0.23.0"}],"component":"org.apache.hadoop:hadoop-common","cve_ids":["CVE-2013-2192"],"ecosystem":"Maven","epss":0.01069,"exploited":false,"fixed_versions":["2.0.6-alpha","0.23.9"],"ghsa_id":"GHSA-pxv5-5vmp-3jj4","id":"tcs_01M5N98B4WF9CY19AP4E2FA51X","modified_at":"2024-12-06T05:49:00.331067Z","published_at":"2022-05-17T02:54:07Z","references":["https://osv.dev/vulnerability/GHSA-pxv5-5vmp-3jj4","https://nvd.nist.gov/vuln/detail/CVE-2013-2192","https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html","http://rhn.redhat.com/errata/RHSA-2014-0037.html","http://rhn.redhat.com/errata/RHSA-2014-0400.html","http://seclists.org/fulldisclosure/2013/Aug/251"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-pxv5-5vmp-3jj4","url":"https://osv.dev/vulnerability/GHSA-pxv5-5vmp-3jj4"}],"summary":"Improper Authentication in Apache Hadoop"}