Red Hat Security AdvisoryRHSA-2007:0380
mod_jk security update
Released 2007-05-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Application Server v2 4AS mod_jk-1.2.20-1jpp_2rh, mod_jk-ap20-1.2.20-1jpp_2rh, mod_jk-ap20-1.2.20-1jpp_2rh.i386 +6
- Red Hat Application Server v2 4ES mod_jk-1.2.20-1jpp_2rh, mod_jk-ap20-1.2.20-1jpp_2rh, mod_jk-ap20-1.2.20-1jpp_2rh.i386 +4
- Red Hat Application Server v2 4WS mod_jk-1.2.20-1jpp_2rh, mod_jk-ap20-1.2.20-1jpp_2rh, mod_jk-ap20-1.2.20-1jpp_2rh.i386 +4
Fixes 1 record
Priority LOW 37
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a craft…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13165 · Published 2007-05-25 · Fixed CWE-22
