CVE-2022-32532

🗓️ 28 Jun 2022 23:20:11Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 124 Views

Apache Shiro before 1.9.1, RegexRequestMatcher misconfiguration bypass vulnerabilit

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager vulnerable to denial of service due to Apache Shiro (CVE-2022-32532)	23 Sep 202206:10	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Shiro (Publicly disclosed vulnerability) Affects IBM Partner Engagement Manager (CVE-2022-32532)	22 Sep 202219:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
ATTACKERKB	CVE-2022-32532	29 Jun 202200:15	–	attackerkb
Circl	CVE-2022-32532	28 Jun 202222:50	–	circl
CNNVD	Apache Shiro 安全漏洞	28 Jun 202200:00	–	cnnvd
CNVD	Apache Shiro Authentication Bypass Vulnerability (CNVD-2022-48384)	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-32532 Authentication Bypass Vulnerability	28 Jun 202223:20	–	cvelist
Debian CVE	CVE-2022-32532	28 Jun 202223:20	–	debiancve
Github Security Blog	Improper Authorization in Apache Shiro	30 Jun 202200:00	–	github

NVD

Vulners

Node

apache shiroRange<1.9.1

[
  {
    "product": "Apache Shiro",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Before 1.9.1"
      }
    ]
  }
]