A vulnerability, which was classified as problematic, has been found in Apache Shiro up to 2.0.6. Affected by this issue is some unknown functionality. Performing a manipulation results in observable timing discrepancy.
This vulnerability is identified as CVE-2026-23901. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
