Intrusion PreventionApache.Shiro.Cookie.RememberMe.Remote.Code.Execution
Description
This indicates an attack attempt to exploit a Code Injection Vulnerability in Apache Shiro.
The vulnerability is due to insufficient validation of the user-supplied cookie. A remote, unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the target server. Successful exploitation of this vulnerability can lead to arbitrary code execution in the context of the application.
Affected Products
Apache Shiro before 1.2.5
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://shiro.apache.org/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 49619 |
| Created | Nov 16, 2020 |
| Updated | Jan 08, 2021 |
| Risk |
|
| CVE ID | CVE-2016-4437 |
| Known Exploited | Yes |
| Exploit Prediction Score | 97.49% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | Apache |