mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing

🗓️ 18 Aug 2015 18:48:48Reported by RedHatType

mod_jk information leak: an unmount rule for a mount subtree may be ignored, enabling remote access to private artifacts.

Reporter	Title	Published	Views	Family All 68
FreeBSD	mod_jk -- information disclosure	15 Jan 201500:00	–	freebsd
Tenable Nessus	Apache Tomcat mod_jk < 1.2.41	24 Jul 201500:00	–	nessus
Tenable Nessus	Debian DLA-240-1 : libapache-mod-jk security update	10 Jun 201500:00	–	nessus
Tenable Nessus	Debian DSA-3278-1 : libapache-mod-jk - security update	4 Jun 201500:00	–	nessus
Tenable Nessus	FreeBSD : mod_jk -- information disclosure (47aa4343-44fa-11e5-9daa-14dae9d210b8)	18 Aug 201500:00	–	nessus
Tenable Nessus	Apache Tomcat JK Connector 1.2.x < 1.2.41 JkUnmount Directive Handling Remote Information Disclosure	18 Aug 201500:00	–	nessus
Tenable Nessus	RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.4.0 update (Important) (RHSA-2015:0846)	20 Apr 201500:00	–	nessus
Tenable Nessus	RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.0 update (Important) (RHSA-2015:0847)	20 Apr 201500:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.0 update (Important) (RHSA-2015:0848)	4 Sep 201800:00	–	nessus
Tenable Nessus	RHEL 5 / 6 / 7 : JBoss Web Server (RHSA-2015:1642)	20 Aug 201500:00	–	nessus

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2014-8111
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-8111
cve	www.cve.org/CVERecord

21 Nov 2025 17:53Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

EPSS0.07109