Security Bulletin: Apache Shiro as used by Master Console is vulnerable to improper acceess control (CVE-2020-13933)

Summary Apache Shiro as used by Master Console is vulnerable to improper acceess control Vulnerability Details CVEID: CVE-2020-13933 DESCRIPTION: Apache Shiro could allow a remote attacker to bypass security restrictions, caused by improper authentication validation. By sending a specially-crafte...

Exploit for CVE-2020-13933

CVE-2020-13933 – Test Bed shiro: Permission configuration...

CVE-2020-13933

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass...

CVE-2020-13933

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass...

UBUNTU-CVE-2020-13933

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass...

CVE-2020-13933

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass...

CVE-2020-13933

Apache Shiro vulnerabilities CVE-2020-13933 affects Shiro

CVE-2020-13933

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass...

CVE-2020-13933

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass...

CVE-2019-13933

CVE-2019-13933 affects Siemens SCALANCE X switches (multiple models including X-200RNA, X-300 family, XR324, XR324-4M, etc.). The root cause is an unauthenticated access vulnerability in the device web configuration interface that allows a remote attacker to bypass access-control rules by sending...

Siemens SCALANCE X Switches (Update B)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X Switches Vulnerability: Missing Authentication for Critical Function 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

CVE-2017-13933

...

CVE-2017-13933

CVE-2017-13933 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2025-13933

Technical details about CVE-2025-13933 are not provided in the supplied documents. No information on affected products, versions, impact, or remediation. Monitor for updates as more details become available.