[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk5h6ytJ5HivrNLBwhK82OXQmOxSDQ4O27PeJYnBzQZo":3,"g5a-risk:CVE-2016-4437":179},{"success":4,"data":5,"meta":177},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":67,"references":68,"referencesCount":117,"weaknesses":118,"weaknessesCount":126,"isActivelyExploited":4,"cisaInfo":127,"otxData":27,"relatedBlogPosts":128,"seoMetadata":129,"configurations":154,"relatedVendorCves":175,"notableEvents":176},"CVE-2016-4437","What is CVE-2016-4437?","Apache Shiro before 1.2.5, when a cipher key has not been configured for the \"remember me\" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.","Apache Shiro before 1.2.5, when a cipher key has not been configured for the \"remember me\" feature, allows remote attackers to execute arbitrary code or bypa...","2016-06-07T14:06:13.247","2025-10-22T00:15:52.76",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":40,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":46,"ObtainAllPrivilege":46,"ObtainUserPrivilege":46,"ObtainOtherPrivilege":46,"UserInteractionRequired":46},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":40,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":43,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,"",8.6,6.4,false,0.93039,[47,47,47,47,47,47,47],"Critical",[51,56,59,64],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"apache","aurora","*","cpe:2.3:a:apache:aurora:*:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":54,"criteria":58,"vulnerable":4},"shiro","cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"redhat","fuse","1.0","cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*",{"vendor":60,"product":65,"version":62,"criteria":66,"vulnerable":4},"jboss_middleware_text-only_advisories","cpe:2.3:a:redhat:jboss_middleware_text-only_advisories:1.0:*:*:*:*:middleware:*:*",4,[69,75,79,83,86,91,94,99,101,103,105,107,109,111,113],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F137310\u002FApache-Shiro-1.2.4-Information-Disclosure.html","Packetstormsecurity",[73,74],"Third Party Advisory","VDB Entry",{"url":76,"source":71,"tags":77},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F157497\u002FApache-Shiro-1.2.4-Remote-Code-Execution.html",[78,73,74],"Exploit",{"url":80,"source":81,"tags":82},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2035.html","Red Hat",[73],{"url":84,"source":81,"tags":85},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2036.html",[73],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F538570\u002F100\u002F0\u002Fthreaded","Securityfocus",[90,73,74],"Broken Link",{"url":92,"source":88,"tags":93},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F91024",[90,73,74],{"url":95,"source":96,"tags":97},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fef3a800c7d727a00e04b78e2f06c5cd8960f09ca28c9b69d94c3c4c4%40%3Cannouncements.aurora.apache.org%3E","Apache",[98],"Mailing List",{"url":70,"source":71,"tags":100},[73,74],{"url":76,"source":71,"tags":102},[78,73,74],{"url":80,"source":81,"tags":104},[73],{"url":84,"source":81,"tags":106},[73],{"url":87,"source":88,"tags":108},[90,73,74],{"url":92,"source":88,"tags":110},[90,73,74],{"url":95,"source":96,"tags":112},[98],{"url":114,"source":115,"tags":116},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4437","CISA",[],15,[119],{"id":120,"name":121,"description":122,"extendedDescription":43,"status":123,"abstraction":124,"structure":125},"CWE-321","Use of Hard-coded Cryptographic Key","The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.","Draft","Variant","Simple",1,{"shortDescription":43,"requiredAction":43,"vulnerabilityName":43,"dateAdded":27},[],{"title":130,"metaDescription":131,"keywords":132,"canonicalUrl":133,"structuredData":134},"What is CVE-2016-4437? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-4437, a critical severity cyber security vulnerability from 2016. High exploit probability (93.0%). Apache Shiro before 1....","CVE-2016-4437, CVE-2016-4437 vulnerability, CVE-2016-4437 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, apache security, redhat security, aurora vulnerability, shiro vulnerability, fuse vulnerability, jboss_middleware_text-only_advisories vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2016-4437",{"@context":135,"@type":136,"headline":130,"description":131,"datePublished":10,"dateModified":11,"author":137,"publisher":141,"about":145,"mainEntityOfPage":149,"articleSection":152,"keywords":153},"https:\u002F\u002Fschema.org","TechArticle",{"@type":138,"name":139,"url":140},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":138,"name":139,"url":140,"logo":142},{"@type":143,"url":144},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":146,"name":6,"description":147,"additionalType":148},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":150,"@id":151},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-4437","Cybersecurity","CVE-2016-4437, CVE-2016-4437 vulnerability, CVE-2016-4437 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[155,167],{"Operator":27,"Negate":27,"Nodes":156},[157],{"Operator":158,"Negate":46,"CPEMatch":159},"OR",[160,164],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":162,"VersionEndExcluding":163,"VersionEndIncluding":27},"5E4E49B7-6247-4353-A80D-ADE138DD0967","0.10.0","0.18.1",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":166,"VersionEndIncluding":27},"2BF5BF73-85B5-4422-B100-EE22B38F574A","1.2.5",{"Operator":27,"Negate":27,"Nodes":168},[169],{"Operator":158,"Negate":46,"CPEMatch":170},[171,173],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"077732DB-F5F3-4E9C-9AC0-8142AB85B32F",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":174,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A0FED4EE-0AE2-4BD8-8DAC-143382E4DB7C",[],[],{"lastModified":11,"cacheTime":178,"version":38},1792247135513,{"score":180,"band":49,"action":181,"scoredAt":182},90,"Emergency patch","2026-10-17T07:57:35.783794+00:00"]