VDB
BDU%3A2024-07563
BDU%3A2024-07563
PUBLISHED
CVSS 4.599999904632568 MEDIUM
Уязвимость модуля mod_jk коннектора Apache Tomcat JK Connector, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
4.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Apache Software Foundation | Red Hat Enterprise Linux, JBoss Core Services, Debian GNU/Linux, Tomcat JK Connector, Jboss Web Server | |
| Apache Software Foundation | Apache Tomcat Connectors | 1.2.9-beta |
Timeline
- Sep 23, 2024 CVE Published
- Sep 23, 2024 PoC Published
- Sep 30, 2024 CVE Updated
References
- http://www.openwall.com/lists/oss-security/2024/09/23/1 url
- https://lists.debian.org/debian-lts-announce/2024/10/msg00010.html url
- https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d advisory
- https://tomcat.apache.org/security-jk.html advisory
- https://access.redhat.com/security/cve/cve-2024-46544 advisory
- https://security-tracker.debian.org/tracker/CVE-2024-46544 advisory
- https://vuldb.com/?id.278283 url