CVE-2013-0253
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL...
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
Exploit likelihood
What each source reports
NVD Score used
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
- Record
CVE-2013-0253- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
- Record
CVE-2013-0253- Updated
- 2026-11-02
EUVDEUVD-2013-0284 No score
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
- Record
EUVD-2013-0284- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-33jw-8g2v-hrp6 No score
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL...
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
- Record
GHSA-33jw-8g2v-hrp6- Updated
- 2026-11-02
OSVBELL-CVE-2013-0253
CVE-2013-0253 does not affect BellSoft software
- Record
BELL-CVE-2013-0253- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-0253 No score
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
- Record
UBUNTU-CVE-2013-0253- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jenkinsRed Hat:openshift:1::el6 |
before 0:1.506-1.el6op | 0:1.506-1.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0253 is a medium vulnerability (CVSS 5.8) in Apache Maven, published April 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. Fixed in jenkins 0:1.506-1.el6op.
References
maven.apache.org/security.html
rhn.redhat.com/errata/RHSA-2013-0700.html
bugzilla.redhat.com/show_bug.cgi?id=917084
lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2013-0253
Show 9 moreShow less
github.com/advisories/GHSA-33jw-8g2v-hrp6
docs.bell-sw.com/security/cves/CVE-2013-0253
access.redhat.com/errata/RHSA-2013:0700
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0700.json
cve.org/CVERecord?id=CVE-2013-0253
ubuntu.com/security/CVE-2013-0253