Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | libapache-mod-jk | 1:1.2.46-1+deb10u2 |
Vulnerabilities 1
-
High 7.5
Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request
Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possibl…