CVE-2020-11989

Published: 22/06/2020 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Apache Shiro prior to 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache shiro

Synopsis Important: Red Hat Fuse 780 release and security update Type/Severity Security Advisory: Important Topic A minor version update (from 77 to 78) is now available for Red Hat Fuse The purpose of this text-only errata is to inform you about the security issues fixed in this releaseRed Hat Produc ...

Debian Bug report logs - #988728 CVE-2020-17523 CVE-2020-17510 CVE-2020-11989 Package: src:shiro; Maintainer for src:shiro is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 18 May 2021 18:39:02 UTC Severity: important Tags: security ...

[CVEID]:CVE-2020-11989 [PRODUCT]:Apache Shiro [VERSION]:Apache Shiro 152 - 153 [PROBLEMTYPE]:Authentication Bypass by Primary Weakness [REFERENCES]: listsapacheorg/threadhtml/r72815a124a119c450b86189767d06848e0d380b1795c6c511d54a675%40%3Cusershiroapacheorg%3E [DESCRIPTION]:Apache Shiro before 153, when using Apache Shiro with Sp ...

从攻防的核心理念出发，阐述了如何构建一个适应性强、与时共进的安全设计方案，并且如何建立一个全面的安全体系，包括资产收集、威胁分析、风险评估和信任边界的确立。文章详细描述了网络战的军事化思维，对合格攻击队伍（红队）和防御队伍（蓝队）的特质进行了比较，强调了在攻防对抗中成本和信任行为的重要性

Red-blue-confrontation 从攻防的核心理念出发，阐述了如何构建一个适应性强、与时共进的安全设计方案，并且如何建立一个全面的安全体系，包括资产收集、威胁分析、风险评估和信任边界的确立。文章详细描述了网络战的军事化思维，对合格攻击队伍（红队）和防御队伍（蓝队）的特质�

HYWZ36-CVE-2020-11989-code

NVD-CWE-noinfo https://lists.apache.org/thread.html/r72815a124a119c450b86189767d06848e0d380b1795c6c511d54a675%40%3Cuser.shiro.apache.org%3E https://lists.apache.org/thread.html/r72815a124a119c450b86189767d06848e0d380b1795c6c511d54a675%40%3Cdev.shiro.apache.org%3E https://lists.apache.org/thread.html/rc8b39ea8b3ef71ddc1cd74ffc866546182683c8adecf19c263fe7ac0%40%3Ccommits.shiro.apache.org%3E https://lists.apache.org/thread.html/r2d2612c034ab21a3a19d2132d47d3e4aa70105008dd58af62b653040%40%3Ccommits.shiro.apache.org%3E https://lists.apache.org/thread.html/rcf3d8041e1232201fe5d74fc612a193e435784d64002409b448b58fe%40%3Cdev.geode.apache.org%3E https://lists.apache.org/thread.html/r408fe60bc8fdfd7c74135249d646d7abadb807ebf90f6fd2b014df21%40%3Cdev.geode.apache.org%3E https://lists.apache.org/thread.html/rab1972d6b177f7b5c3dde9cfb0a40f03bca75f0eaf1d8311e5762cb3%40%3Ccommits.shiro.apache.org%3E https://access.redhat.com/errata/RHSA-2020:5568 https://nvd.nist.gov https://github.com/shanshanerxi/Red-blue-confrontation

CVE-2020-11989

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect