fr Sign in

Not rated

CVE-2019-12422 Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding…

Description

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

Affected products and versions

Product	Affected versions	Fixed in
Shiro	Versions not published

References

[shiro-dev] 20191118 [ANNOUNCE][CVE-2019-12422] Apache Shiro 1.4.2 released lists.apache.org
[shiro-commits] 20200622 svn commit: r1879088 - /shiro/site/publish/security-reports.html lists.apache.org

Timeline

Published November 18, 2019
Last modified August 4, 2024

The 2 CVEs of Shiro →

CVE-2023-34478 Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an… Not rated

Track this CVE