Authentication Bypass

shiro-core is vulnerable to authentication bypass. An attacker is able to bypass authentication using an empty principal due to an insecure validation in FirstSuccessfulStrategy...