Authentication Bypass Vulnerability in Apache Shiro by Vendor
CVE-2020-11989

9.8CRITICAL

Key Information:

Vendor
Apache
Status
Apache Shiro
Vendor
CVE Published:
22 June 2020

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 25%

Summary

A vulnerability in Apache Shiro prior to version 1.5.3 can lead to an authentication bypass when employed with Spring dynamic controllers. This flaw occurs as a result of specifically crafted requests that exploit weaknesses in the system's authentication mechanism, allowing unauthorized access to sensitive operations or data.

Affected Version(s)

Apache Shiro Apache Shiro 1.5.2 - 1.5.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

HYWZ36-CVE-2020-11989-code
Created by HYWZ36

References

https://lists.apache.org/thread.html/r72815a124a119c450b8...
x_refsource_MISC
https://lists.apache.org/thread.html/r72815a124a119c450b8...
mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rc8b39ea8b3ef71ddc1c...
mailing-listx_refsource_MLIST

EPSS Score

25% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.