shiro: access control bypass
| Package(s): | shiro | CVE #(s): | CVE-2016-6802 | ||||
| Created: | September 23, 2016 | Updated: | September 28, 2016 | ||||
| Description: | From the CVE entry: Apache Shiro before 1.3.2, when using a non-root servlet context path, specifically crafted requests can be used to by pass some security servlet filters, resulting in unauthorized access. | ||||||
| Alerts: |
| ||||||