[TINKERPOP-2881] Improper Authentication in Apache Shiro

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 3.6.2
• Component/s: neo4j
• Labels: Ironbank
• Flags: Patch, Important
• Assignee: Unassigned
• Reporter: Jim Foscue
• Created: 27/Feb/23 20:04
• Updated: 09/Mar/23 20:34
• Resolved: 09/Mar/23 20:34

Description

Vulnerability in shiro-core-1.4.0

Need to update to shiro 1.10 or greater.

https://github.com/advisories/GHSA-pc4w-8v5j-29w9

Issue Links

• is a clone of: TINKERPOP-2880 Deserialization of Untrusted Data in Neo4j
• is cloned by: TINKERPOP-2882 Vulnerability in com.hazelcase_hazelcast-3.7.8