Lucene search
Redhat.comRH:CVE-2022-40664HistoryMay 05, 2023 - 6:19 p.m.
CVE-2022-40664
2023-05-0518:19:35
redhat.com
access.redhat.com
29
apache shiro
authentication bypass
requestdispatcher
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
81.0%
A flaw was found in Apache Shiro. An authentication bypass vulnerability occurs when forwarding or including via the RequestDispatcher.
Related
prion
prion
Authentication flaw
2022-10-12 07:15:00
github
github
Apache Shiro Authentication Bypass vulnerability
2022-10-12 12:00:16
osv
osv
CVE-2022-40664
2022-10-12 07:15:09
Apache Shiro Authentication Bypass vulnerability
2022-10-12 12:00:16
cve
cve
CVE-2022-40664
2022-10-12 07:15:09
f5
f5
K30671731 : Apache Shiro vulnerability CVE-2022-40664
2022-10-26 00:00:00
veracode
veracode
Authentication Bypass
2022-10-13 17:34:12
nvd
nvd
CVE-2022-40664
2022-10-12 07:15:09
cnvd
cnvd
Apache Shiro Authentication Bypass Vulnerability (CNVD-2022-68497)
2022-10-13 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to security bypass due to Apache Shiro (CVE-2022-40664)
2023-01-10 10:50:50
broadcom
broadcom
nessus
nessus
Apache Shiro < 1.10.0 Authentication Bypass
2022-10-28 00:00:00
Oracle WebCenter Sites (Jan 2023 CPU)
2023-01-20 00:00:00
cvelist
cvelist
debiancve
debiancve
CVE-2022-40664
2022-10-12 07:15:09
ubuntucve
ubuntucve
CVE-2022-40664
2022-10-12 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
81.0%
Related for RH:CVE-2022-40664