PT-2024-1139 · Apache+2 · Apache Shiro+2

Brian Demers · CVE-2023-46749 · Published 2024-01-12 · Updated 2024-12-10

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache Shiro versions 1.13.0 and earlier, or 2.0.0-alpha-4 and earlier

Description The issue is related to a path traversal attack that can result in an authentication bypass when used together with path rewriting. This can allow a remote attacker to bypass the authentication process by sending specially crafted requests.

Recommendations Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+, or ensure blockSemicolon is enabled (this is the default).

Exploit

Fix

DoS

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-00452

CVE-2023-46749

GHSA-JC7H-C423-MPJC

USN-7147-1

Affected Products

Apache Shiro

Linuxmint

Ubuntu

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46749.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-46749 · Vendor Advisory
• https://lists.apache.org/thread/mdv7ftz7k4488rzloxo2fb0p9shnp9wm · Vendor Advisory
• https://osv.dev/vulnerability/USN-7147-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46749 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46749 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jc7h-c423-mpjc · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-46749 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-34478 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46749 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7147-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46750 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-46749 · Security Note
• https://ubuntu.com/security/CVE-2016-6802 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-46749 · Vendor Advisory