title: Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass
description: Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.
problem types: CWE-287 Improper Authentication
affected:
{
product: Apache Shiro
vendor: Apache Software Foundation
versions:
lessThan: 1.8.0, status: affected, version: Apache Shiro, versionType: custom
}