title: Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
description: Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.
problem types: CWE-287 Improper Authentication
affected:
{
vendor: Apache Software Foundation
product: Apache Shiro
versions:
version: Apache Shiro, status: affected, lessThan: 1.10.0, versionType: custom
}