https://bugzilla.redhat.com/show_bug.cgi?id=1903727
Bug ID: 1903727
Summary: CVE-2020-17510 shiro: specially crafted HTTP request
may cause an authentication bypass
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: aileenc(a)redhat.com, ataylor(a)redhat.com,
bibryam(a)redhat.com, chazlett(a)redhat.com,
dbecker(a)redhat.com, drieden(a)redhat.com,
extras-orphan(a)fedoraproject.org, ganandan(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gvarsami(a)redhat.com, hbraun(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jschluet(a)redhat.com,
jwon(a)redhat.com, kconner(a)redhat.com,
ldimaggi(a)redhat.com, lhh(a)redhat.com, lpeer(a)redhat.com,
mburns(a)redhat.com, mkolesni(a)redhat.com,
nwallace(a)redhat.com, pantinor(a)redhat.com,
puntogil(a)libero.it, rwagner(a)redhat.com,
sclewis(a)redhat.com, scohen(a)redhat.com,
slinaber(a)redhat.com, tcunning(a)redhat.com,
tkirby(a)redhat.com
Target Milestone: ---
Classification: Other
Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially
crafted HTTP request may cause an authentication bypass.
References:
https://lists.apache.org/thread.html/r95bdf3703858b5f958b5e190d747421771b...
https://lists.apache.org/thread.html/rc2cff2538b683d480426393eecf1ce8dd80...
--
You are receiving this mail because:
You are on the CC list for the bug.