CVE-2016-6802

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path

published September 20, 2016

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09680 · 95.5th percentile
Published
2016-09-20T19:00Z
EPSS history
Timeline
  • 20 SEP 19:00Z
    Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path
    cvelistv5