CVE-2014-8111 in Tomcat Connectors

Riassunto

di MITRE

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 10/10/2014
• Divulgazione: 21/04/2015
• Moderazione: accettato
• Voce: VDB-75032
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.07109
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8111
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8111
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8111/