Lucene search
GoogleOSV:GHSA-P836-389H-J692HistoryMay 14, 2022 - 2:46 a.m.
Improper Access Control in Apache Shiro
2022-05-1402:46:17
Google
osv.dev
25
apache shiro
improper access control
software security
EPSS
0.971
Percentile
99.8%
Apache Shiro before 1.2.5, when a cipher key has not been configured for the “remember me” feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
References
packetstormsecurity.com/files/137310/Apache-Shiro-1.2.4-Information-Disclosure.html
packetstormsecurity.com/files/157497/Apache-Shiro-1.2.4-Remote-Code-Execution.html
rhn.redhat.com/errata/RHSA-2016-2035.html
rhn.redhat.com/errata/RHSA-2016-2036.html
www.securityfocus.com/archive/1/538570/100/0/threaded
www.securityfocus.com/bid/91024
lists.apache.org/thread.html/ef3a800c7d727a00e04b78e2f06c5cd8960f09ca28c9b69d94c3c4c4@%3Cannouncements.aurora.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2016-4437
Related
prion
prion
Code injection
2016-06-07 14:06:00
Deserialization of untrusted data
2022-04-05 16:15:00
redhatcve
redhatcve
CVE-2016-4437
2016-06-07 08:18:40
metasploit
metasploit
Apache Shiro v1.2.4 Cookie RememberME Deserial RCE
2020-04-27 15:50:09
cve
cve
CVE-2016-4437
2016-06-07 14:06:13
CVE-2020-19229
2022-04-05 16:15:10
exploitdb
exploitdb
Apache Shiro 1.2.4 - Cookie RememberME Deserial RCE (Metasploit)
2020-05-01 00:00:00
debiancve
debiancve
CVE-2016-4437
2016-06-07 14:06:13
f5
f5
K23374214 : Apache Shiro vulnerability CVE-2016-4437
2016-07-07 00:00:00
SOL23374214 - Apache Shiro vulnerability CVE-2016-4437
2016-07-07 00:00:00
attackerkb
attackerkb
CVE-2016-4437
2016-06-07 00:00:00
CVE-2020-19229
2022-04-05 00:00:00
cvelist
cvelist
CVE-2016-4437
2016-06-07 14:00:00
CVE-2020-19229
2022-04-05 15:37:39
checkpoint_advisories
checkpoint_advisories
Apache Shiro Remote Code Execution (CVE-2016-4437)
2020-05-24 00:00:00
ubuntucve
ubuntucve
CVE-2016-4437
2016-06-07 00:00:00
cisa_kev
cisa_kev
Apache Shiro Code Execution Vulnerability
2021-11-03 00:00:00
github
github
Improper Access Control in Apache Shiro
2022-05-14 02:46:17
packetstorm
packetstorm
Apache Shiro 1.2.4 Remote Code Execution
2020-04-29 00:00:00
zdt
zdt
Apache Shiro 1.2.4 Remote Code Execution Exploit
2020-04-30 00:00:00
nvd
nvd
CVE-2016-4437
2016-06-07 14:06:13
CVE-2020-19229
2022-04-05 16:15:10
nessus
nessus
Apache Shiro Default Cipher Key (CVE-2016-4437)
2022-03-30 00:00:00
Apache Shiro < 1.2.5 Default Cipher Key (CVE-2016-4437)
2022-04-15 00:00:00
nuclei
nuclei
osv
osv
CVE-2020-19229
2022-04-05 16:15:10
redhat
redhat
(RHSA-2016:2036) Important: Red Hat JBoss A-MQ 6.3 security update
2016-10-06 16:16:19
(RHSA-2016:2035) Important: Red Hat JBoss Fuse 6.3 security update
2016-10-06 16:16:07
ibm
ibm
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00