CVE-2007-1860
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.9%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 12.92% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- apache/tomcat jk web server connector
- Source
- secalert@redhat.com
References
- http://docs.info.apple.com/article.html?artnum=306172
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
- http://secunia.com/advisories/25383Patch, Vendor Advisory
- http://secunia.com/advisories/25701Vendor Advisory
- http://secunia.com/advisories/26235Vendor Advisory
- http://secunia.com/advisories/26512Vendor Advisory
- http://secunia.com/advisories/27037Vendor Advisory
- http://secunia.com/advisories/29242Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200708-15.xml
- http://tomcat.apache.org/connectors-doc/news/20070301.html#20070518.1Patch
- http://tomcat.apache.org/security-jk.htmlPatch
- http://www.debian.org/security/2007/dsa-1312
- http://www.osvdb.org/34877
- http://www.redhat.com/support/errata/RHSA-2007-0379.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0261.html
- http://www.securityfocus.com/bid/24147
- http://www.securityfocus.com/bid/25159
- http://www.securitytracker.com/id?1018138
- http://www.vupen.com/english/advisories/2007/1941Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2732Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3386Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34496
- https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.