CVE-2014-8111 in Tomcat Connectors

Sumário

de MITRE

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 10/10/2014
• Divulgação: 21/04/2015
• Moderação: aceite
• Entrada: VDB-75032
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.07109
• KEV: não
• Atividades: muito baixo
• Sector: Chemical, Lawfirm, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8111
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8111
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8111/