Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fixes the issue. The issue only effects static files. If static files are served from a case-insensitive filesystem, such as default macOS setup, static files may be accessed by varying the case of the filename in the request. If only lower-case (common default) filters are present in Shiro, they may be bypassed this way. Shiro 2.1.0 and later has a new parameters to remediate this issue shiro.ini: filterChainResolver.caseInsensitive = true application.properties: shiro.caseInsensitive=true Shiro 3.0.0 and later makes this the default in shiro.ini-based configurations. Shiro 3.0.1 and later makes this the default in all configurations, including programmatic and Spring / Spring Boot.

The version of IBM Engineering Requirements Management DOORS (formerly IBM Rational DOORS) installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory.

  - IBM DOORS Web Access do not limit the length of a connection which could allow for a Slowloris HTTP denial     of service attack to take place. This can cause the web server to become unresponsive. (CVE-2024-25039)

  - IBM DOORS Web Access is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated     attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality     potentially leading to credentials disclosure within a trusted session. (CVE-2025-0152)

  - IBM DOORS Web Access could allow a remote attacker to obtain sensitive information when a detailed     technical error message is returned in the browser. This information could be used in further attacks     against the system. (CVE-2020-4984)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro:
    before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fixes the issue. The issue only
    effects static files. If static files are served from a case-insensitive filesystem, such as default macOS
    setup, static files may be accessed by varying the case of the filename in the request. If only lower-case
    (common default) filters are present in Shiro, they may be bypassed this way. Shiro 2.1.0 and later has a
    new parameters to remediate this issue shiro.ini: filterChainResolver.caseInsensitive = true
    application.properties: shiro.caseInsensitive=true Shiro 3.0.0 and later makes this the default in
    shiro.ini-based configurations. Shiro 3.0.1 and later makes this the default in all configurations,
    including programmatic and Spring / Spring Boot. (CVE-2026-23903)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro:
    before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fixes the issue. The issue only     effects static files. If static files are served from a case-insensitive filesystem, such as default macOS     setup, static files may be accessed by varying the case of the filename in the request. If only lower-case     (common default) filters are present in Shiro, they may be bypassed this way. Shiro 2.1.0 and later has a     new parameters to remediate this issue shiro.ini: filterChainResolver.caseInsensitive = true     application.properties: shiro.caseInsensitive=true Shiro 3.0.0 and later makes this the default in     shiro.ini-based configurations. Shiro 3.0.1 and later makes this the default in all configurations,     including programmatic and Spring / Spring Boot. (CVE-2026-23903)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333335	IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145)	Nessus	Windows	Local	high
437700	SCA: security update for org.apache.shiro:shiro-spring (GHSA-c244-p6m5-vqj6)	Tenable Cloud Security	SCA Checks	Local	medium
437700	SCA: security update for org.apache.shiro:shiro-spring (GHSA-c244-p6m5-vqj6)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
298461	Linux Distros Unpatched Vulnerability : CVE-2026-23903	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-23903

medium

Tenable Plugins

high

medium

medium

medium