Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
https://nvd.nist.gov/vuln/detail/cve-2016-4437
Post summary
The link points to an NVD record for CVE‑2016‑4437, providing standard disclosure information including technical details and patch references, but no PoC, exploit, or active usage is mentioned.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | aurora | - | - | - |
| App | apache | shiro | - | - | - |
| App | redhat | fuse | 1.0 | - | - |
| App | redhat | jboss_middleware_text-only_advisories | 1.0 | middleware | - |