Description
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, password and session management.
Apache Shiro before 1.7.1 (when used with Spring), is vulnerable to an authentication bypass vulnerability that allows an attacker to bypass authentication using a specially crafted HTTP request .
Remediation
Uprade to the latest version of Apache Shiro.
References
Related Vulnerabilities
WordPress Plugin Event Single Page Templates Addon For The Events Calendar Security Bypass (1.5)
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Security Bypass (8.9)
WordPress Plugin WP Learn Manager Security Bypass (1.1.4)
Spring Security Authentication Bypass
WordPress Plugin GA Top post for WP by Asentechllc Security Bypass (1.0)