CVE-2014-8111

Published: Apr 21, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

Affected (1)

Products: Apache: Tomcat Connectors

Apache

1 product

Tomcat Connectors

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat Connectors	Up to 1.2.40

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (28)

http://rhn.redhat.com/errata/RHSA-2015-0846.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0847.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0848.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0849.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1641.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1642.html

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3278

Source: secalert@redhat.com

http://www.securityfocus.com/bid/74265

Source: secalert@redhat.com

https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0846.html