Safeguard
Tag

apache-shiro

Safeguard articles tagged "apache-shiro" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Apache Shiro remember-me cookie deserialization RCE (CVE-2016-4437)

Apache Shiro's default rememberMe cipher key enables unauthenticated Java deserialization RCE. Here's how CVE-2016-4437 works and how to fix it.

Dec 23, 20258 min read
apache-shiro — Safeguard Blog