Vendor/product archive

apache / tomcat_connectors CVEs

Beta · best-effort

3 CVEs tagged to apache / tomcat_connectors — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2024-46544

Published Sep 23, 2024

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to infor…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-41081

Published Sep 13, 2023

Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardD…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2014-8111

Published Apr 21, 2015

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifa…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1