Firetruck

CVE-2016-4437

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the "remember me" feature.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected