USN-6826-1: mod_jk vulnerability
Karl von Randow discovered that modjk was vulnerable to an authentication bypass. If the configuration did not provide explicit mounts for all possible proxied requests, an attacker could possibly use this vulnerability to bypass security constraints configured in httpd.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6826-1?
USN-6826-1 has been classified as a high severity vulnerability due to its potential for authentication bypass.
How do I fix USN-6826-1?
To fix USN-6826-1, ensure that you update the libapache2-mod-jk package to at least version 1:1.2.48-2ubuntu0.1.
What systems are affected by USN-6826-1?
USN-6826-1 affects various versions of Ubuntu, including 16.04, 18.04, 20.04, 22.04, and 23.10.
Can USN-6826-1 be exploited remotely?
Yes, USN-6826-1 can potentially be exploited remotely if the configuration lacks proper mounts for proxied requests.
What is the nature of the vulnerability in USN-6826-1?
The nature of the vulnerability in USN-6826-1 is an authentication bypass that compromises the security constraints set in the httpd configuration.