cbcvebase.
CVE-2016-4437
published 2016-06-07

CVE-2016-4437: Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass…

PriorityP196critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
KEVITWEXPLOITInitial access
CISA Known Exploited Vulnerabilitydue 2022-05-03
Exploited in the wild
EPSS
92.99%
99.8th percentile
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

Affected

9 ranges
VendorProductVersion rangeFixed in
apacheaurora>= 0.10.0 < 0.18.10.18.1
apacheshiro< 1.2.51.2.5
apacheshiro>= 0 < 1.2.5-11.2.5-1
apacheshiro>= 0 < 1.2.5-11.2.5-1
apacheshiro>= 0 < 1.2.5-11.2.5-1
debianshiro< shiro 1.2.5-1 (bookworm)shiro 1.2.5-1 (bookworm)
jeesitejeesite
redhatfuse
redhatjboss_middleware_text-only_advisories

Detection & IOCsextracted from sources · hover to see the quote

cookierememberMe=<base64-encoded AES-CBC encrypted Java deserialization payload>
otherAES-128-CBC key: kPH+bIxk5D2deZiIxcaaaA== (base64)
commandGET / HTTP/1.1 with Cookie: rememberMe={{base64(concat(base64_decode("QUVTL0NCQy9QS0NTNVBhZA=="),aes_cbc(..., base64_decode("kPH+bIxk5D2deZiIxcaaaA=="), ...)))}}
  • Detect exploitation attempts by monitoring HTTP requests containing a 'rememberMe' cookie with an unusually large or base64-encoded payload, especially when the application is Apache Shiro prior to 1.2.5.
  • Alert on use of the known default AES-128-CBC key (base64: kPH+bIxk5D2deZiIxcaaaA==) in rememberMe cookie decryption — presence of this key indicates the default/unpatched configuration is being exploited.
  • Use out-of-band (DNS/HTTP) interaction detection: a successful exploit triggers a DNS callback; monitor for DNS lookups originating from the target server following a rememberMe cookie submission.
  • Flag Java deserialization gadget chain payloads (e.g., CommonsCollections2) delivered via the rememberMe cookie in HTTP GET requests to Apache Shiro endpoints.
  • Match on HTTP GET requests where the Cookie header contains 'rememberMe=' with a base64 payload that, when decoded, begins with AES-CBC IV bytes — indicative of the Shiro deserialization attack pattern.
  • ·The default hardcoded AES key is only exploitable when no custom cipher key has been configured for the 'remember me' feature. If a custom key is set but known/leaked, the vulnerability may still be exploitable.
  • ·The vulnerability affects Apache Shiro before 1.2.5; versions using a static/default cipher key for 'Remember Me' are at risk regardless of other configuration.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vulncheck9.8CRITICAL
cisa9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.