- Vulnerability/
- USN-6826-1
11/6/2024
USN-6826-1: mod_jk vulnerability
First published: Tue Jun 11 2024(Updated: )
Karl von Randow discovered that mod_jk was vulnerable to an authentication bypass. If the configuration did not provide explicit mounts for all possible proxied requests, an attacker could possibly use this vulnerability to bypass security constraints configured in httpd.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libapache2-mod-jk | <1:1.2.48-2ubuntu0.1 | 1:1.2.48-2ubuntu0.1 |
| Ubuntu Linux | =23.10 | |
| All of | ||
| ubuntu/libapache2-mod-jk | <1:1.2.48-1ubuntu0.1 | 1:1.2.48-1ubuntu0.1 |
| Ubuntu Linux | =22.04 | |
| All of | ||
| ubuntu/libapache2-mod-jk | <1:1.2.46-1ubuntu0.1 | 1:1.2.46-1ubuntu0.1 |
| Ubuntu Linux | =20.04 | |
| All of | ||
| ubuntu/libapache2-mod-jk | <1:1.2.43-1ubuntu0.1~esm1 | 1:1.2.43-1ubuntu0.1~esm1 |
| Ubuntu Linux | =18.04 | |
| All of | ||
| ubuntu/libapache2-mod-jk | <1:1.2.41-1ubuntu0.1~esm1 | 1:1.2.41-1ubuntu0.1~esm1 |
| Ubuntu Linux | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-41081
- https://launchpad.net/ubuntu/+source/libapache-mod-jk/1:1.2.48-2ubuntu0.1
- https://launchpad.net/ubuntu/+source/libapache-mod-jk/1:1.2.48-1ubuntu0.1
- https://launchpad.net/ubuntu/+source/libapache-mod-jk/1:1.2.46-1ubuntu0.1
- https://ubuntu.com/security/notices/USN-6826-1 (Advisory)
- agent/references
- agent/last-modified-date
- agent/severity
- agent/title
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/type
- agent/trending
- agent/source
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu linux
- version/ubuntu linux/23.10
- version/ubuntu linux/22.04
- version/ubuntu linux/20.04
- version/ubuntu linux/18.04
- version/ubuntu linux/16.04