Tomcat Connectors (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 47 known versions, newest CVE from 2024-09-23. Vendor: Apache.

CVEs of Tomcat Connectors

• CVE-2024-46544 - CVSS 5.9 (medium), 2024-09-23: Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration…
• CVE-2023-41081 - CVSS 7.5 (high), 2023-09-13: Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration…
• CVE-2014-8111 - CVSS 5 (medium), 2015-04-21: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access…