Information disclosure in Apache Tomcat Connectors

CVE-2014-8111

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.071 (93.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References