VDB
BDU%3A2024-01896
BDU%3A2024-01896
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость фреймворка Apache Shiro и фреймворка создания веб-приложений Spring Boot, связанная с возникновением конфликта интерпретаций, позволяющая нарушителю обойти процедуру аутентификации
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Red Hat Inc., Apache Software Foundation, VMware Inc. | Debian GNU/Linux, Red Hat Integration Camel for Spring Boot, Shiro, Red Hat Fuse, Spring Boot |
Timeline
- Mar 12, 2024 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://lists.apache.org/thread/dzj0k2smpzzgj6g666hrbrgsrlf9yhkl url
- https://access.redhat.com/security/cve/CVE-2023-22602 url
- http://access.redhat.com/errata/RHSA-2023:2100 url
- https://access.redhat.com/errata/RHSA-2023:3954 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2182198 url
- https://security-tracker.debian.org/tracker/CVE-2023-22602 url
- https://www.cybersecurity-help.cz/vdb/SB2023050803 url
- https://www.cybersecurity-help.cz/vulnerabilities/71175/ url
- https://safe-surf.ru/upload/VULN-new/VULN.2023-05-10.1.pdf url