Lucene search
FreeBSD47AA4343-44FA-11E5-9DAA-14DAE9D210B8HistoryJan 15, 2015 - 12:00 a.m.
mod_jk -- information disclosure
2015-01-1500:00:00
vuxml.freebsd.org
15
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
63.9%
NIST reports:
Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores
JkUnmount rules for subtrees of previous JkMount rules, which allows
remote attackers to access otherwise restricted artifacts via
unspecified vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | ap22-mod_jk | < 1.2.41,1 | UNKNOWN |
| FreeBSD | any | noarch | ap24-mod_jk | < 1.2.41,1 | UNKNOWN |
Related
osv
osv
libapache-mod-jk - security update
2015-06-09 00:00:00
libapache-mod-jk - security update
2015-06-03 00:00:00
nessus
nessus
FreeBSD : mod_jk -- information disclosure (47aa4343-44fa-11e5-9daa-14dae9d210b8)
2015-08-18 00:00:00
Debian DLA-240-1 : libapache-mod-jk security update
2015-06-10 00:00:00
Debian DSA-3278-1 : libapache-mod-jk - security update
2015-06-04 00:00:00
debian
debian
[SECURITY] [DLA 240-1] libapache-mod-jk security update
2015-06-09 18:22:41
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-03 19:14:32
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-03 19:14:32
openvas
openvas
Debian: Security Advisory (DLA-240-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3278-1 (libapache-mod-jk - security update)
2015-06-03 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3278-1] libapache-mod-jk security update
2015-06-08 00:00:00
Apache mod_jk information disclosure
2015-06-08 00:00:00
mageia
mageia
Updated apache-mod_jk package fixes security vulnerability
2015-07-01 16:23:59
prion
prion
Design/Logic Flaw
2015-04-21 17:59:00
veracode
veracode
Authorization Bypass
2019-01-15 09:07:28
tomcat
tomcat
Fixed in Apache Tomcat JK Connector 1.2.41
2014-10-10 00:00:00
ubuntucve
ubuntucve
CVE-2014-8111
2015-04-21 00:00:00
debiancve
debiancve
CVE-2014-8111
2015-04-21 17:59:00
cve
cve
CVE-2014-8111
2015-04-21 17:59:00
redhat
redhat
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
63.9%
Related for 47AA4343-44FA-11E5-9DAA-14DAE9D210B8