CVE-2019-12422 PUBLISHED

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

EPSS 54.90% · 98.0th percentile

Risk Scores

EPSS Score
54.90%
98.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSshiro1.3.2-2, 1.3.2-3~18.04, 1.3.2-3~18.04.1
Ubuntu:22.04:LTSshiro1.3.2-4, 1.3.2-5, 0
Ubuntu:24.04:LTSshiro0, 1.3.2-5
Ubuntu:20.04:LTSshiro0, 1.3.2-4, 1.3.2-4ubuntu0.1
Ubuntu:Pro:16.04:LTSshiro0, 1.2.4-1ubuntu0.1~esm2, 1.2.4-1ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →