CVE-2020-13933

Description

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

69.494

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1.7	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.0	Windows
Vulnerabilities CVE-2020-13933 are fixed in Apache - Shiro Core 1.6.0	Windows
Powerful and easy-to-use Java security framework (USN-6352-1) libshiro-java_1.3.2-4ubuntu0.2_all.deb	Linux
Powerful and easy-to-use Java security framework (USN-6352-1) libshiro-java_1.3.2-3~18.04.1_all.deb	Linux
Vulnerabilities CVE-2020-13933 are fixed in Apache - Shiro Core for Linux 1.6.0	Linux

No records found