CVE-2023-41081

The CVE-2023-41081 issue affects the mod_jk component of Apache Tomcat Connectors (not the ISAPI redirector). In configurations that enable ForwardDirectories without explicit mounts for all proxied requests, mod_jk could map to the first defined worker via implicit mapping, exposing the status w...

CVE-2024-46544

The Apache Tomcat Connectors (versions 1.2.9-beta through 1.2.49) are vulnerable to an Incorrect Default Permissions (CWE-276) issue affecting mod_jk on Unix-like systems. This flaw allows local users to view and modify shared memory containing mod_jk configuration data, potentially leading to in...

CVE-2014-8111

CVE-2014-8111 is documented in connected sources as affecting the Apache Tomcat Connectors (mod_jk) before 1.2.41, where JkUnmount rules for subtrees of previous JkMount rules are ignored, enabling a remote attacker to access otherwise restricted artifacts via unspecified vectors. The OpenVAS ent...