CVE-2024-46544

2024-09-2313:12:19

redhat.com

access.redhat.com

apache tomcat

connectors

incorrect default permissions

local users

shared memory

mod_jk configuration

information disclosure

denial of service

mitigation

red hat product security

AI Score

6.3

Confidence

Low

JSON

An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing mod_jk configuration, which may lead to information disclosure and denial of service.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.