Safeguard
Tag

cve-2016-4437

Safeguard articles tagged "cve-2016-4437" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Apache Shiro remember-me cookie deserialization RCE (CVE-2016-4437)

Apache Shiro's default rememberMe cipher key enables unauthenticated Java deserialization RCE. Here's how CVE-2016-4437 works and how to fix it.

Dec 23, 20258 min read
cve-2016-4437 — Safeguard Blog