Security Apache Shiro 1.2.4 Information Disclosure June 3, 2016 007admin Leave a comment Apache Shiro versions 1.0.0-incubating through 1.2.4 suffer from an information disclosure vulnerability.