Lucene search

CVE-2022-40664 Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher

🗓️ 12 Oct 2022 00:00:00Reported by apacheType

CVE-2022-40664 Authentication Bypass Vulnerability in Apache Shir

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 20
F5 Networks	K30671731 : Apache Shiro vulnerability CVE-2022-40664	26 Oct 202200:00	–	f5
Veracode	Authentication Bypass	13 Oct 202217:34	–	veracode
CVE	CVE-2022-40664	12 Oct 202207:15	–	cve
NVD	CVE-2022-40664	12 Oct 202207:15	–	nvd
CNVD	Apache Shiro Authentication Bypass Vulnerability (CNVD-2022-68497)	13 Oct 202200:00	–	cnvd
Prion	Authentication flaw	12 Oct 202207:15	–	prion
OSV	CVE-2022-40664	12 Oct 202207:15	–	osv
OSV	Apache Shiro Authentication Bypass vulnerability	12 Oct 202212:00	–	osv
Github Security Blog	Apache Shiro Authentication Bypass vulnerability	12 Oct 202212:00	–	github
UbuntuCve	CVE-2022-40664	12 Oct 202200:00	–	ubuntucve

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Shiro",
    "versions": [
      {
        "version": "Apache Shiro",
        "status": "affected",
        "lessThan": "1.10.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/10/13/1
lists	www.lists.apache.org/thread/loc2ktxng32xpy7lfwxto13k4lvnhjwg
openwall	www.openwall.com/lists/oss-security/2022/10/12/2
security	www.security.netapp.com/advisory/ntap-20221118-0005/
openwall	www.openwall.com/lists/oss-security/2022/10/12/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Oct 2022 00:00Current

9.6High risk

Vulners AI Score9.6

EPSS0.0037

CWE-287