description: Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
problem types: Weak Cookie Vulnerability
affected:
{
product: Shiro
vendor: Apache
versions:
status: affected, version: to 1.4.1
}