Tomcat Jk Web Server Connector
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat_jk_web_server_connector:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat Jk Web Server Connector (67b895ce-c443-5c2f-a072-4eccdb52a710) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:25.273432 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-1860 |
vulnerable | 2026-06-08 04:49:43.659648 |
Details available
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.
Published: 2007-05-25T18:00:00.000Z
Updated: 2024-08-07T13:13:41.369Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.