Lucene search
HistoryOct 12, 2022 - 7:15 a.m.
CVE-2022-40664
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
81.0%
Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.
Affected configurations
Node
apacheshiroRange<1.10.0
Related
prion
prion
Authentication flaw
2022-10-12 07:15:00
osv
osv
CVE-2022-40664
2022-10-12 07:15:09
Apache Shiro Authentication Bypass vulnerability
2022-10-12 12:00:16
github
github
Apache Shiro Authentication Bypass vulnerability
2022-10-12 12:00:16
cve
cve
CVE-2022-40664
2022-10-12 07:15:09
f5
f5
K30671731 : Apache Shiro vulnerability CVE-2022-40664
2022-10-26 00:00:00
veracode
veracode
Authentication Bypass
2022-10-13 17:34:12
cnvd
cnvd
Apache Shiro Authentication Bypass Vulnerability (CNVD-2022-68497)
2022-10-13 00:00:00
debiancve
debiancve
CVE-2022-40664
2022-10-12 07:15:09
ubuntucve
ubuntucve
CVE-2022-40664
2022-10-12 00:00:00
redhatcve
redhatcve
CVE-2022-40664
2023-05-05 18:19:35
cvelist
cvelist
nessus
nessus
Apache Shiro < 1.10.0 Authentication Bypass
2022-10-28 00:00:00
Oracle WebCenter Sites (Jan 2023 CPU)
2023-01-20 00:00:00
broadcom
broadcom
ibm
ibm
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to security bypass due to Apache Shiro (CVE-2022-40664)
2023-01-10 10:50:50
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
81.0%
Related for NVD:CVE-2022-40664