CVE-2022-40664: Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Shiroto a version that resolves this vulnerability.Fixed in 1.10.0
Event History
Frequently Asked Questions
What is CVE-2022-40664?
CVE-2022-40664 is an Authentication Bypass Vulnerability in Apache Shiro before version 1.10.0.
How does CVE-2022-40664 affect Apache Shiro?
CVE-2022-40664 affects Apache Shiro when forwarding or including via RequestDispatcher.
What is the severity of CVE-2022-40664?
CVE-2022-40664 has a severity level of critical with a CVSS score of 9.8.
How can I fix CVE-2022-40664?
To fix CVE-2022-40664, you should upgrade Apache Shiro to version 1.10.0 or later.
Where can I find more information about CVE-2022-40664?
You can find more information about CVE-2022-40664 at the following references: [1](http://www.openwall.com/lists/oss-security/2022/10/12/1), [2](http://www.openwall.com/lists/oss-security/2022/10/12/2), [3](http://www.openwall.com/lists/oss-security/2022/10/13/1).