CVE-2020-11989

🗓️ 22 Jun 2020 00:00:00Reported by ubuntu.comType

Apache Shiro authentication bypass in Spring dynamic controller

Reporter	Title	Published	Views	Family All 21
Cvelist	CVE-2020-11989	22 Jun 202018:06	–	cvelist
Github Security Blog	Improper Authentication in Apache Shiro	7 May 202115:53	–	github
Prion	Authentication flaw	22 Jun 202019:15	–	prion
RedhatCVE	CVE-2020-11989	23 Jun 202014:34	–	redhatcve
OSV	Improper Authentication in Apache Shiro	7 May 202115:53	–	osv
OSV	CVE-2020-11989	22 Jun 202019:15	–	osv
OSV	shiro - security update	8 Jul 202000:00	–	osv
OSV	shiro vulnerabilities	18 Feb 202120:35	–	osv
Tenable Nessus	Apache Shiro < 1.5.3 Authentication Bypass	1 Jun 202200:00	–	nessus
Tenable Nessus	Debian DLA-2273-1 : shiro security update	9 Jul 202000:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-11989
launchpad	www.launchpad.net/bugs/cve/CVE-2020-11989
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-11989

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	16.04	noarch	shiro	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Jun 2020 00:00Current

9.5High risk

Vulners AI Score9.5

EPSS0.251