isapi_redirect: Mishandled HTTP request paths in jk_isapi_plugin.c can lead to unintended exposure of application resources via the reverse proxy

🗓️ 13 Jun 2018 12:19:29Reported by RedHatType

Mishandled HTTP request paths in isapi_redirect could expose unintended Tomcat resources via the reverse proxy.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Platform Symphony, IBM Spectrum Symphony (CVE-2017-15698, CVE-2017-15706, CVE-2018-1323, CVE-2018-1305, CVE-2018-1304)	18 Jun 201801:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2018-1323,CVE-2018-1305,CVE-2018-1304)	17 Jun 201805:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache Tomcat vulnerabilities.	15 Jun 201823:49	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm
CNVD	Apache Tomcat JK ISAPI Connector Information Disclosure Vulnerability	15 Mar 201800:00	–	cnvd
CVE	CVE-2018-1323	12 Mar 201816:00	–	cve
Cvelist	CVE-2018-1323	12 Mar 201816:00	–	cvelist
Debian CVE	CVE-2018-1323	12 Mar 201816:00	–	debiancve
NVD	CVE-2018-1323	12 Mar 201816:29	–	nvd
OSV	CVE-2018-1323	12 Mar 201816:29	–	osv

Vulners

Node

AND

Source	Link
tomcat	www.tomcat.apache.org/security-jk.html
access	www.access.redhat.com/security/cve/CVE-2018-1323
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1323
cve	www.cve.org/CVERecord

28 Jun 2026 12:07Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25

CVSS 37.5

EPSS0.44244