CVE-2013-0253

medium Apache
CVSS v3 Base Score
5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS Score
0.7%
Exploitation probability in 30 days
Top 27% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
None
Published: April 9, 2013 (4783 days ago)
Last Modified: April 29, 2026
Vendor: Apache
Source: NVD

Description

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.

CWE

CWE-16

Affected Products

apache maven

References

🔗 rhn.redhat.com 🔗 bugzilla.redhat.com 🔗 lists.apache.org 🔗 maven.apache.org 🔗 rhn.redhat.com