CVE-2016-6802

Description

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

13.506

Vulnerability	OS Platform
Vulnerabilities CVE-2016-6802 are fixed in Apache-shiro-web 1.3.2	Windows
Vulnerabilities CVE-2016-6802 are fixed in Apache-shiro-all 1.3.2	Windows
Powerful and easy-to-use Java security framework (USN-7147-1) libshiro-java_1.3.2-5ubuntu0.24.10.1_all.deb	Linux
Vulnerabilities CVE-2016-6802 are fixed in Apache-shiro-web for Linux 1.3.2	Linux
Vulnerabilities CVE-2016-6802 are fixed in Apache-shiro-all for Linux 1.3.2	Linux

No records found