Read the docs
Red Hat Security Advisory

RHSA-2018:1843

Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update

Released 2018-06-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2018-01226 CVE-2018-1323 · GHSA-jxj8-3w7h-p8mx

Information disclosure in Apache Tomcat Connectors

Priority MEDIUM 63

The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correctly.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.46397 Published 2018-03-12 Partial fix CWE-200