JK Status Manager Information Disclosure

It is possible to obtain an overview of the remote Apache Tomcat Connectors configuration. By accessing this overview page; a remote, unauthenticated attacker can discover a large amount of information about the remote web server, including : - The IP address of the host. - The version of the...

CVE-2019-7392

An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration...