CVE-2019-12422 Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding…

Description

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

Affected products and versions

Product	Affected versions	Fixed in
Shiro	Versions not published

Other CVEs of Shiro

The 2 CVEs of Shiro →

CVE-2023-34478 Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an… Not rated