Red Hat Security AdvisoryRHSA-2007:0379
mod_jk security update
Released 2007-05-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Application Stack v1 for Enterprise Linux AS (v.4) mod_jk-1.2.20-1.el4s1.5, mod_jk-ap20-1.2.20-1.el4s1.5, mod_jk-ap20-1.2.20-1.el4s1.5.i386 +2
- Red Hat Application Stack v1 for Enterprise Linux ES (v.4) mod_jk-1.2.20-1.el4s1.5, mod_jk-ap20-1.2.20-1.el4s1.5, mod_jk-ap20-1.2.20-1.el4s1.5.i386 +2
Fixes 1 record
Priority LOW 37
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a craft…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13165 · Published 2007-05-25 · Fixed CWE-22
