CVE-2023-41081

The CVE-2023-41081 issue affects the mod_jk component of Apache Tomcat Connectors (not the ISAPI redirector). In configurations that enable ForwardDirectories without explicit mounts for all proxied requests, mod_jk could map to the first defined worker via implicit mapping, exposing the status w...

CVE-2024-46544

CVE-2024-46544 affects Apache Tomcat Connectors (mod_jk) on Unix-like systems, with vulnerable versions 1.2.9-beta through 1.2.49. The issue is Incorrect Default Permissions that can allow local users to view/modify shared memory containing mod_jk configuration, potentially leading to information...

CVE-2014-8111

CVE-2014-8111 is documented in connected sources as affecting the Apache Tomcat Connectors (mod_jk) before 1.2.41, where JkUnmount rules for subtrees of previous JkMount rules are ignored, enabling a remote attacker to access otherwise restricted artifacts via unspecified vectors. The OpenVAS ent...