AlmaLinux 9.2 [TuxCare] Security Update: mod_jk (ALMALINUX9.2:CLSA-2025:1763032400)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763032400 advisory. - Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a...

SUSE CVE-2023-41081

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

[SECURITY] [DLA 3580-1] libapache-mod-jk security update

Debian LTS Advisory DLA-3580-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 24, 2023 https://wiki.debian.org/LTS Package : libapache-mod-jk Version : 1:1.2.46-1+deb10u2 CVE ID : CVE-2023-41081 Debian Bug : 1051956 The modjk component of Apache Tomcat...

JkOptions ForwardDirectories Unauthorized Access

The vulnerability of the JkOptions+ForwardDirectories configuration in the modjk module of the server-side modules for connecting applications to the Tomcat/Apache Tomcat connectors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security...

CVE-2023-41081: Undefined Security Weakness

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...