CVE-2019-12422

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack

published November 18, 2019

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09101 · 95.3th percentile
Published
2019-11-18T22:04Z
EPSS history
Timeline
  • 18 NOV 22:04Z
    Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack
    cvelistv5