The vulnerability of the JkOptions+ForwardDirectories configuration in the mod_jk module of the server modules for connecting applications like Tomcat and Apache Tomcat Connectors allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the JkOptions+ForwardDirectories configuration in the modjk module of the server-side modules for connecting applications to the Tomcat/Apache Tomcat connectors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security...

CVE-2023-41081: Undefined Security Weakness

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...