CVE-2013-2193

Apache HBase 0.92.x (pre-0.92.3) and 0.94.x (pre-0.94.9) with Kerberos enabled is affected. An attacker in MITM position can disable bidirectional RPC authentication between client and RegionServer, potentially leaking sensitive information via unspecified vectors. Root cause: RPC bidirectional a...