CVE-2022-40664

🗓️ 12 Oct 2022 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 134 Views

Apache Shiro before 1.10.0, Auth Bypass Vuln in RequestDispatche

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2023-24998)	20 Apr 202310:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Shiro (CVE-2022-40664) and Apache Commons FileUpload (CVE-2023-24998) affect IBM WebSphere Service Registry and Repository.	18 Apr 202315:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2020-7789, CVE-2020-7598, CVE-2021-44906 , XFID: 216835, XFID: 220063)	24 Mar 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to security bypass due to Apache Shiro (CVE-2022-40664)	10 Jan 202310:50	–	ibm
Tenable Nessus	Apache Shiro < 1.10.0 Authentication Bypass	28 Oct 202200:00	–	nessus
Tenable Nessus	Oracle WebCenter Sites (Jan 2023 CPU)	20 Jan 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-40664	19 Aug 202500:00	–	nessus
Broadcom	Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.	29 Aug 202300:00	–	broadcom
Broadcom	Security updates provided in Brocade SANnav v2.2.2a and v2.3.0	29 Aug 202300:00	–	broadcom
Circl	CVE-2022-40664	12 Oct 202212:37	–	circl

NVD

Vulners

Node

apache shiroRange<1.10.0

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Shiro",
    "versions": [
      {
        "version": "Apache Shiro",
        "status": "affected",
        "lessThan": "1.10.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/10/13/1
lists	www.lists.apache.org/thread/loc2ktxng32xpy7lfwxto13k4lvnhjwg
security	www.security.netapp.com/advisory/ntap-20221118-0005/
openwall	www.openwall.com/lists/oss-security/2022/10/12/1
openwall	www.openwall.com/lists/oss-security/2022/10/12/2

15 May 2025 15:16Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

EPSS0.00708

SSVC

CWE-287