Lucene search
F5F5:K23374214HistoryJul 07, 2016 - 12:00 a.m.
K23374214 : Apache Shiro vulnerability CVE-2016-4437
2016-07-0700:00:00
my.f5.com
38
Security Advisory Description
Apache Shiro before 1.2.5, when a cipher key has not been configured for the “remember me” feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. (CVE-2016-4437)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
cve
cve
CVE-2016-4437
2016-06-07 14:06:13
CVE-2020-19229
2022-04-05 16:15:10
debiancve
debiancve
CVE-2016-4437
2016-06-07 14:06:13
cvelist
cvelist
CVE-2016-4437
2016-06-07 14:00:00
CVE-2020-19229
2022-04-05 15:37:39
attackerkb
attackerkb
CVE-2016-4437
2016-06-07 00:00:00
CVE-2020-19229
2022-04-05 00:00:00
redhatcve
redhatcve
CVE-2016-4437
2016-06-07 08:18:40
prion
prion
Code injection
2016-06-07 14:06:00
Deserialization of untrusted data
2022-04-05 16:15:00
f5
f5
SOL23374214 - Apache Shiro vulnerability CVE-2016-4437
2016-07-07 00:00:00
packetstorm
packetstorm
Apache Shiro 1.2.4 Remote Code Execution
2020-04-29 00:00:00
nessus
nessus
Apache Shiro Default Cipher Key (CVE-2016-4437)
2022-03-30 00:00:00
Apache Shiro < 1.2.5 Default Cipher Key (CVE-2016-4437)
2022-04-15 00:00:00
nvd
nvd
CVE-2016-4437
2016-06-07 14:06:13
CVE-2020-19229
2022-04-05 16:15:10
nuclei
nuclei
zdt
zdt
Apache Shiro 1.2.4 Remote Code Execution Exploit
2020-04-30 00:00:00
ubuntucve
ubuntucve
CVE-2016-4437
2016-06-07 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Shiro Remote Code Execution (CVE-2016-4437)
2020-05-24 00:00:00
cisa_kev
cisa_kev
Apache Shiro Code Execution Vulnerability
2021-11-03 00:00:00
github
github
Improper Access Control in Apache Shiro
2022-05-14 02:46:17
osv
osv
Improper Access Control in Apache Shiro
2022-05-14 02:46:17
CVE-2020-19229
2022-04-05 16:15:10
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2016:2035) Important: Red Hat JBoss Fuse 6.3 security update
2016-10-06 16:16:07
ibm
ibm
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00