Signature Detail
Short Name |
HTTP:DIR:APACHE-SHIRO-DIR-TRAV |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Apache Shiro Directory Traversal |
Release Date |
2013/05/09 |
Update Number |
2262 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Apache Shiro Directory Traversal
This signature detects directory traversal attempts against Apache Shiro. Attackers can navigate to any directory on the server.
Extended Description
Apache Shiro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Apache Shiro 1.0.0 is vulnerable; other versions may be affected.
Affected Products
- Apache Software Foundation Apache Shiro 1.0.0
- JSecurity.org JSecurity 0.9.x
References
- BugTraq: 44616
- CVE: CVE-2010-3863