PT-2015-4004 · Apache+1 · Apache Tomcat Connectors+1

Publicado 2015-04-21 · Atualizado 2024-06-15 · CVE-2014-8111

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat Connectors (mod jk) versions prior to 1.2.41

Description The issue allows remote attackers to access restricted artifacts due to the ignoring of JkUnmount rules for subtrees of previous JkMount rules.

Recommendations For versions prior to 1.2.41, update to version 1.2.41 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-8111

DLA-240-1

DSA-3278-1

MGASA-2015-0254

OPENSUSE-SU-2024:10488-1

RHSA-2015:0846

RHSA-2015:0847

RHSA-2015:0848

RHSA-2015:1642

SUSE-SU-2015:1851-1

SUSE-SU-2015_1851-1

SUSE-SU-2018:3970-1

Produtos afetados

Apache Tomcat Connectors

Suse

Referências · 66

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Nota
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• https://bugzilla.suse.com/949771 · Nota
• https://suse.com/security/cve/CVE-2015-3185 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-0848.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-3183 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10488-1 · Aviso do Fabricante
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://security-tracker.debian.org/tracker/DSA-3278-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/libapache-mod-jk · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=16078 · Nota
• https://suse.com/security/cve/CVE-2015-3185.html · Nota
• https://bugzilla.suse.com/938728 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-0846.html · Aviso do Fabricante
• https://bugzilla.suse.com/931002 · Nota