what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Brian Demers

Apache Shiro Filter Bypass

Posted Sep 13, 2016

Authored by Brian Demers

Apache Shiro versions prior to 1.3.2, when using a non-root servlet context path, allowed specifically crafted requests can be used to bypass some security servlet filters, resulting in unauthorized access.

tags | advisory, root, bypass

advisories | CVE-2016-6802

SHA-256 | 922a5e1fd7a8d3e74cc2b4e09d237b3dd41e4acc621099a0adf20ff10239e9c8

Download | Favorite | View

Apache Shiro 1.2.4 Information Disclosure

Posted Jun 3, 2016

Authored by Brian Demers

Apache Shiro versions 1.0.0-incubating through 1.2.4 suffer from an information disclosure vulnerability.

tags | advisory, info disclosure

advisories | CVE-2016-4437

SHA-256 | 7f3f67607bcb0b11683159589f2327ab0253244f1398897c94b94f1c8ef20ce6

Download | Favorite | View