CVE-2016-6802

Опубликовано: 20 сент. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.

Ссылки

http://packetstormsecurity.com/files/138709/Apache-Shiro-Filter-Bypass.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/539397/100/0/threaded
http://www.securityfocus.com/bid/92947
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/138709/Apache-Shiro-Filter-Bypass.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/539397/100/0/threaded
http://www.securityfocus.com/bid/92947
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:shiro:1.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.0968

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2016-6802

CVSS3: 7.5

ubuntu

почти 10 лет назад

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.

CVE-2016-6802

CVSS3: 5.6

redhat

почти 10 лет назад

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.

CVE-2016-6802

CVSS3: 7.5

debian

почти 10 лет назад

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet ...

GHSA-4q2v-j639-cp7p

CVSS3: 7.5

github

больше 4 лет назад

Improper Access Control in Apache Shiro

EPSS

Процентиль: 95%

0.0968

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284