Red Hat Fuse 7/shiro-web
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Shiro's "remember me" cookie age is not verified on the server. | org.apache.shiro:shiro-coreorg.apache.shiro:shiro-web | MavenRed Hat | Low | Fix reported | |
| Apache Shiro has an Authentication Bypass | org.apache.shiro:shiro-springRed Hat Fuse 7/shiro-web | MavenRed Hat | Medium | Fix reported | |
| Apache Shiro sends sensitive cookies in HTTPS session without 'Secure' attribute | org.apache.shiro:shiro-webRed Hat Fuse 7/shiro-web | MavenRed Hat | Medium | Fix reported | |
| Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass | org.apache.shiro:shiro-coreRed Hat Fuse 7/shiro-web | MavenRed Hat | Critical | Fix reported |