CVE-2014-8111: Infoleak
Apache Tomcat Connectors (modjk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8111?
CVE-2014-8111 is considered a medium severity vulnerability due to its potential to allow unauthorized access to restricted resources.
How do I fix CVE-2014-8111?
To fix CVE-2014-8111, upgrade Apache Tomcat Connectors (mod_jk) to version 1.2.41 or later.
What types of attacks can exploit CVE-2014-8111?
CVE-2014-8111 can be exploited by remote attackers to access restricted artifacts through unconfigured JkUnmount rules.
What versions of Apache Tomcat Connectors are affected by CVE-2014-8111?
Apache Tomcat Connectors versions prior to 1.2.41 are affected by CVE-2014-8111.
What should I do if I cannot update Apache Tomcat Connectors due to compatibility issues with CVE-2014-8111?
If you cannot update, consider implementing strict access controls and monitoring to mitigate the risk associated with CVE-2014-8111.