{"cvss":0.0,"datePublished":"2021-11-03T00:00:00Z","dateUpdated":"2021-11-03T00:00:00Z","description":"Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the \"remember me\" feature.","dueDate":"2022-05-03T00:00:00Z","id":"CVE-2016-4437","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Shiro","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"vulncheck_kev","title":"Apache Shiro Code Execution Vulnerability","vendor":"Apache"}