Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Aurora
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-4437 2 Apache, Redhat 4 Aurora, Shiro, Fuse and 1 more 2024-11-21 6.8 MEDIUM 9.8 CRITICAL
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.