Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8111HistoryApr 21, 2015 - 5:59 p.m.
CVE-2014-8111
2015-04-2117:59:00
Debian Security Bug Tracker
security-tracker.debian.org
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
63.9%
Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libapache-mod-jk | < 1:1.2.40+svn150520-1 | libapache-mod-jk_1:1.2.40+svn150520-1_all.deb |
| Debian | 11 | all | libapache-mod-jk | < 1:1.2.40+svn150520-1 | libapache-mod-jk_1:1.2.40+svn150520-1_all.deb |
| Debian | 10 | all | libapache-mod-jk | < 1:1.2.40+svn150520-1 | libapache-mod-jk_1:1.2.40+svn150520-1_all.deb |
| Debian | 999 | all | libapache-mod-jk | < 1:1.2.40+svn150520-1 | libapache-mod-jk_1:1.2.40+svn150520-1_all.deb |
| Debian | 13 | all | libapache-mod-jk | < 1:1.2.40+svn150520-1 | libapache-mod-jk_1:1.2.40+svn150520-1_all.deb |
Related
osv
osv
libapache-mod-jk - security update
2015-06-09 00:00:00
libapache-mod-jk - security update
2015-06-03 00:00:00
nessus
nessus
FreeBSD : mod_jk -- information disclosure (47aa4343-44fa-11e5-9daa-14dae9d210b8)
2015-08-18 00:00:00
Debian DLA-240-1 : libapache-mod-jk security update
2015-06-10 00:00:00
Debian DSA-3278-1 : libapache-mod-jk - security update
2015-06-04 00:00:00
debian
debian
[SECURITY] [DLA 240-1] libapache-mod-jk security update
2015-06-09 18:22:41
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-03 19:14:32
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-03 19:14:32
openvas
openvas
Debian: Security Advisory (DLA-240-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3278-1 (libapache-mod-jk - security update)
2015-06-03 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-08 00:00:00
Apache mod_jk information disclosure
2015-06-08 00:00:00
mageia
mageia
Updated apache-mod_jk package fixes security vulnerability
2015-07-01 16:23:59
prion
prion
Design/Logic Flaw
2015-04-21 17:59:00
veracode
veracode
Authorization Bypass
2019-01-15 09:07:28
tomcat
tomcat
Fixed in Apache Tomcat JK Connector 1.2.41
2014-10-10 00:00:00
ubuntucve
ubuntucve
CVE-2014-8111
2015-04-21 00:00:00
cve
cve
CVE-2014-8111
2015-04-21 17:59:00
freebsd
freebsd
mod_jk -- information disclosure
2015-01-15 00:00:00
redhat
redhat
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
63.9%
Related for DEBIANCVE:CVE-2014-8111