Vulnerability Details : CVE-2014-8111
Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.
Vulnerability category: Information leak
Products affected by CVE-2014-8111
- cpe:2.3:a:apache:tomcat_connectors:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-8111
0.25%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 65 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-8111
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2014-8111
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-8111
-
http://rhn.redhat.com/errata/RHSA-2015-0847.html
-
https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E
svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ - Pony Mail
-
https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d@%3Cdev.tomcat.apache.org%3E
svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/ - Pony Mail
-
https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925@%3Cdev.tomcat.apache.org%3E
Pony Mail!
-
http://www.debian.org/security/2015/dsa-3278
Debian -- Security Information -- DSA-3278-1 libapache-mod-jk
-
http://rhn.redhat.com/errata/RHSA-2015-0848.html
RHSA-2015:0848 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2015-1641.html
Red Hat Customer Portal
-
https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935@%3Cdev.tomcat.apache.org%3E
svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ - Pony Mail
-
https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c@%3Cdev.tomcat.apache.org%3E
svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/ - Pony Mail
-
http://rhn.redhat.com/errata/RHSA-2015-0846.html
RHSA-2015:0846 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2015-1642.html
RHSA-2015:1642 - Security Advisory - Red Hat Customer Portal
-
https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4@%3Cdev.tomcat.apache.org%3E
svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ - Pony Mail
-
http://www.securityfocus.com/bid/74265
Apache Tomcat 'mod_jk' CVE-2014-8111 Information Disclosure Vulnerability
-
http://rhn.redhat.com/errata/RHSA-2015-0849.html
Red Hat Customer Portal
Jump to