Red Hat Security AdvisoryRHSA-2009:1087
mod_jk security update
Released 2009-06-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Application Server v2 4AS mod_jk-1.2.28-1jpp_3rh, mod_jk-ap20-1.2.28-1jpp_3rh, mod_jk-ap20-1.2.28-1jpp_3rh.i386 +6
- Red Hat Application Server v2 4ES mod_jk-1.2.28-1jpp_3rh, mod_jk-ap20-1.2.28-1jpp_3rh, mod_jk-ap20-1.2.28-1jpp_3rh.i386 +4
- Red Hat Application Server v2 4WS mod_jk-1.2.28-1jpp_3rh, mod_jk-ap20-1.2.28-1jpp_3rh, mod_jk-ap20-1.2.28-1jpp_3rh.i386 +4
Fixes 1 record
Priority LOW 23
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a req…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.07263 · Published 2009-04-09 · Fixed CWE-200
