CVE-2014-8111 Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified v...
MediumCVSS 5.0
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libapache-mod-jk(Debian:12) | < 1:1.2.40+svn150520-1 | 1:1.2.40+svn150520-1 |
| debian/libapache-mod-jk(Debian:13) | < 1:1.2.40+svn150520-1 | 1:1.2.40+svn150520-1 |
| debian/libapache-mod-jk(Debian:14) | < 1:1.2.40+svn150520-1 | 1:1.2.40+svn150520-1 |
| apache tomcat connectors | <= 1.2.40 | No fix listed |
References
- Debian Security Tracker CVE-2014-8111 vendor-advisory
- RHSA-2015:0846 vendor-advisory
- RHSA-2015:0847 vendor-advisory
- RHSA-2015:0848 vendor-advisory
- RHSA-2015:0849 vendor-advisory
- RHSA-2015:1641 vendor-advisory
- RHSA-2015:1642 vendor-advisory
- DSA-3278 vendor-advisory
- 74265 vdb-entry
- [tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/ mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/ mailing-list
- bugs.debian.org issue-tracking