LoginSignup
0
0

More than 3 years have passed since last update.

@shimizukawasaki(清水 川崎)

[漏洞通告]Apache Shiro权限绕过漏洞

Posted at

漏洞描述

近日,亚信安全网络攻防实验室监测到Apache Shiro官方发布安全更新,修复了一个权限绕过漏洞.攻击者利用该漏洞可以绕过验证访问到后台功能.
image.png

漏洞编号

暂无

漏洞威胁等级

高危

受影响范围

Apache Shiro < 1.5.2

修复建议

更新到最新版本

时间轴

[0] 2020/03/26 亚信安全网络攻防实验室发布漏洞通告

Reference

https://seclists.org/oss-sec/2020/q1/120
https://github.com/apache/shiro/releases

0
0
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
Sign upLogin
0
0