CVE-2022-40664
Assigner: apache
Published: 2022-10-12T00:00:00
State: PUBLISHED
title: Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
descriptions: value: Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.
affected: vendor: Apache Software Foundation
product: Apache Shiro
versions: version: Apache Shiro
status: affected
lessThan: 1.10.0
versionType: custom
credits: value: Apache Shiro would like to thank Y4tacker for reporting this issue
problemTypes: descriptions: type: CWE
description: CWE-287 Improper Authentication
cweId: CWE-287
x_generator: engine: Vulnogram 0.0.9
source: discovery: UNKNOWN