Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-40664HistoryOct 12, 2022 - 7:15 a.m.
CVE-2022-40664
2022-10-1207:15:09
Debian Security Bug Tracker
security-tracker.debian.org
109
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
81.0%
Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | shiro | <= 1.3.2-5 | shiro_1.3.2-5_all.deb |
| Debian | 11 | all | shiro | <= 1.3.2-4+deb11u1 | shiro_1.3.2-4+deb11u1_all.deb |
| Debian | 10 | all | shiro | <= 1.3.2-4+deb10u1 | shiro_1.3.2-4+deb10u1_all.deb |
| Debian | 999 | all | shiro | <= 1.3.2-5 | shiro_1.3.2-5_all.deb |
| Debian | 13 | all | shiro | <= 1.3.2-5 | shiro_1.3.2-5_all.deb |
Related
prion
prion
Authentication flaw
2022-10-12 07:15:00
osv
osv
CVE-2022-40664
2022-10-12 07:15:09
Apache Shiro Authentication Bypass vulnerability
2022-10-12 12:00:16
github
github
Apache Shiro Authentication Bypass vulnerability
2022-10-12 12:00:16
cve
cve
CVE-2022-40664
2022-10-12 07:15:09
nvd
nvd
CVE-2022-40664
2022-10-12 07:15:09
f5
f5
K30671731 : Apache Shiro vulnerability CVE-2022-40664
2022-10-26 00:00:00
veracode
veracode
Authentication Bypass
2022-10-13 17:34:12
cnvd
cnvd
Apache Shiro Authentication Bypass Vulnerability (CNVD-2022-68497)
2022-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2022-40664
2022-10-12 00:00:00
redhatcve
redhatcve
CVE-2022-40664
2023-05-05 18:19:35
cvelist
cvelist
ibm
ibm
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to security bypass due to Apache Shiro (CVE-2022-40664)
2023-01-10 10:50:50
nessus
nessus
Apache Shiro < 1.10.0 Authentication Bypass
2022-10-28 00:00:00
Oracle WebCenter Sites (Jan 2023 CPU)
2023-01-20 00:00:00
broadcom
broadcom
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
81.0%
Related for DEBIANCVE:CVE-2022-40664