Apache Tomcat Connectors (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-23. Vendor: Apache Software Foundation.

CVEs of Apache Tomcat Connectors

• CVE-2024-46544 - CVSS 5.9 (medium), 2024-09-23: Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration…
• CVE-2023-41081 - CVSS 7.5 (high), 2023-09-13: Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration…
• CVE-2018-11759 - CVSS 7.5 (high), 2018-10-31: The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector…
• CVE-2018-1323 - CVSS 7.5 (high), 2018-03-12: The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker…