Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:OPENSUSE-SU-2024:10625-1
HistoryJun 15, 2024 - 12:00 a.m.

apache2-mod_jk-1.2.48-2.9 on GA media

2024-06-1500:00:00
Google
osv.dev
1
apache2
mod_jk
package
opensuse
tumbleweed
security issues

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

JSON

These are all security issues fixed in the apache2-mod_jk-1.2.48-2.9 package on the GA media of openSUSE Tumbleweed.

Related

openvas 17
debiancve 3
tomcat 3
nessus 13
cve 3
nuclei 1
prion 3
f5 1
ubuntucve 3
redhatcve 2
cvelist 3
nvd 3
debian 3
osv 2
checkpoint_advisories 2
saint 4
exploitdb 2
suse 1
packetstorm 1
redhat 5
gentoo 1
zdi 1
cisco 1
securityvulns 2
freebsd 1
metasploit 1
d2 1
cisa 1
ibm 5
veracode 3
oracle 1
openvas
openvas
Apache Tomcat JK Connector (mod_jk) < 1.2.46 Authentication Bypass Vulnerability - Windows
2019-01-03 00:00:00
Apache Tomcat JK Connector (mod_jk) < 1.2.46 Authentication Bypass Vulnerability - Linux
2019-01-03 00:00:00
Apache Tomcat JK Connector (mod_jk) < 1.2.46 Authentication Bypass Vulnerability - Active Check
2019-01-03 00:00:00
debiancve
debiancve
CVE-2018-11759
2018-10-31 20:29:00
CVE-2007-0774
2007-03-04 22:19:00
CVE-2018-1323
2018-03-12 16:29:00
tomcat
tomcat
Fixed in Apache Tomcat JK Connector 1.2.46
2018-06-05 00:00:00
Fixed in Apache Tomcat JK Connector 1.2.21
2007-02-06 00:00:00
Fixed in Apache Tomcat JK Connector 1.2.43
2017-12-07 00:00:00
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : apache2-mod_jk (SUSE-SU-2023:4513-1)
2023-11-22 00:00:00
SUSE SLES12 Security Update : apache2-mod_jk (SUSE-SU-2018:3963-2)
2019-06-03 00:00:00
SUSE SLES12 Security Update : apache2-mod_jk (SUSE-SU-2018:3963-1)
2018-12-04 00:00:00
cve
cve
CVE-2018-11759
2018-10-31 20:29:00
CVE-2007-0774
2007-03-04 22:19:00
CVE-2018-1323
2018-03-12 16:29:00
nuclei
nuclei
Apache Tomcat JK Connect <=1.2.44 - Manager Access
2020-07-06 16:28:42
prion
prion
Cross site request forgery (csrf)
2018-10-31 20:29:00
Stack overflow
2007-03-04 22:19:00
Design/Logic Flaw
2018-03-12 16:29:00
f5
f5
K38108582 : Apache Tomcat vulnerability CVE-2018-11759
2018-11-09 00:00:00
ubuntucve
ubuntucve
CVE-2018-11759
2018-10-31 00:00:00
CVE-2007-0774
2007-03-04 00:00:00
CVE-2018-1323
2018-03-12 00:00:00
redhatcve
redhatcve
CVE-2018-11759
2018-11-02 15:19:10
CVE-2018-1323
2018-03-13 06:19:04
cvelist
cvelist
CVE-2018-11759
2018-10-31 20:00:00
CVE-2007-0774
2007-03-04 22:00:00
CVE-2018-1323
2018-03-12 16:00:00
nvd
nvd
CVE-2018-11759
2018-10-31 20:29:00
CVE-2007-0774
2007-03-04 22:19:00
CVE-2018-1323
2018-03-12 16:29:00
debian
debian
[SECURITY] [DSA 4357-1] libapache-mod-jk security update
2018-12-20 22:25:19
[SECURITY] [DLA 1609-1] libapache-mod-jk security update
2018-12-17 22:14:32
[SECURITY] [DSA 4357-1] libapache-mod-jk security update
2018-12-20 22:25:19
osv
osv
libapache-mod-jk - security update
2018-12-20 00:00:00
libapache-mod-jk - security update
2018-12-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability
2008-08-04 00:00:00
HTTP Format Sizes (CVE-2007-0774)
2013-07-04 00:00:00
saint
saint
Apache Tomcat JK Web Server Connector URI worker map buffer overflow
2008-07-30 00:00:00
Apache Tomcat JK Web Server Connector URI worker map buffer overflow
2008-07-30 00:00:00
Apache Tomcat JK Web Server Connector URI worker map buffer overflow
2008-07-30 00:00:00
exploitdb
exploitdb
Apache Tomcat Connector mod_jk - &#039;exec-shield&#039; Remote Overflow
2007-07-08 00:00:00
Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)
2010-07-25 00:00:00
suse
suse
Security update for apache2-mod_jk (important)
2018-12-08 00:12:01
packetstorm
packetstorm
apache_modjk_overflow.rb.txt
2007-07-10 00:00:00
redhat
redhat
(RHSA-2007:0096) Critical: mod_jk security update
2007-03-02 00:00:00
(RHSA-2007:0164) Critical: mod_jk security update
2007-04-12 00:00:00
(RHSA-2018:1843) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update
2018-06-13 12:18:07
gentoo
gentoo
Apache JK Tomcat Connector: Remote execution of arbitrary code
2007-03-16 00:00:00
zdi
zdi
Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability
2007-03-02 00:00:00
cisco
cisco
Cisco Wireless Control System Tomcat mod_jk.so Vulnerability
2008-01-30 16:00:00
securityvulns
securityvulns
Apache Tomcat buffer overflow
2007-03-02 00:00:00
ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability
2007-03-02 00:00:00
freebsd
freebsd
mod_jk -- long URL stack overflow vulnerability
2007-03-02 00:00:00
metasploit
metasploit
Apache mod_jk 1.2.20 Buffer Overflow
2007-05-22 21:08:47
d2
d2
DSquare Exploit Pack: D2SEC_MOD_JK
2007-03-04 22:19:00
cisa
cisa
Apache Releases Security Update for Apache Tomcat JK Connectors
2018-10-31 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2018-1323,CVE-2018-1305,CVE-2018-1304)
2018-06-17 05:28:11
Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology
2021-04-28 18:35:50
Security Bulletin: Vulnerability in Apache Tomcat affects IBM Platform Symphony, IBM Spectrum Symphony (CVE-2017-15698, CVE-2017-15706, CVE-2018-1323, CVE-2018-1305, CVE-2018-1304)
2018-06-18 01:43:41
veracode
veracode
Denial Of Service
2019-05-16 03:38:52
Path Traversal
2019-05-16 03:38:52
Denial Of Service
2019-05-16 03:38:53
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

JSON
Related for OSV:OPENSUSE-SU-2024:10625-1
openvas17debiancve3tomcat3nessus13cve3nuclei1prion3f51ubuntucve3redhatcve2cvelist3nvd3debian3osv2checkpoint_advisories2saint4exploitdb2suse1packetstorm1redhat5gentoo1zdi1cisco1securityvulns2freebsd1metasploit1d21cisa1ibm5veracode3oracle1