Description
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, password and session management.
Apache Shiro before 1.7.1 (when used with Spring), is vulnerable to an authentication bypass vulnerability that allows an attacker to bypass authentication using a specially crafted HTTP request .
Remediation
Uprade to the latest version of Apache Shiro.
References
Related Vulnerabilities
WordPress Plugin Shopping Cart & eCommerce Store Multiple Security Bypass Vulnerabilities (3.0.20)
WordPress Plugin JS Job Manager Security Bypass (1.1.8)
WordPress Plugin iThemes Security (formerly Better WP Security) Security Bypass (7.9.0)
WordPress Plugin Captchinoo, Google recaptcha for admin login page Security Bypass (2.3)
WordPress Plugin Premmerce Variation Swatches for WooCommerce Security Bypass (1.0)