Description
Apache Shiro Remeber Me 默认密钥反序列化漏洞(CVE-2016-4437)
Apache Shiro Remeber Me 默认密钥反序列化漏洞(CVE-2016-4437)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2016-4437
https://github.com/vulhub/vulhub/blob/master/shiro/CVE-2016-4437/README.md
https://www.cnblogs.com/darkcyan/p/18319822
https://zhuanlan.zhihu.com/p/697440681
https://blog.csdn.net/wangzhifei1/article/details/135640524
http://joker-vip.github.io/2022/01/10/Apache%20Shiro%201.2.4%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2016-4437%EF%BC%89/
https://saucer-man.com/information_security/396.html
https://zgao.top/cve-2016-4437-apache-shiro/
https://www.exploit-db.com/exploits/48410
https://issues.apache.org/jira/browse/SHIRO-550