NVD

Id
54031  
Name
CVE-2007-1860  
Description
mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-05-25  
Modified Date
2011-09-21  
Seq
2007-1860  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273957 54031 CVE-2007-1860 http://docs.info.apple.com/article.html?artnum=306172  View
273958 54031 CVE-2007-1860 HPSBUX02262  View
273959 54031 CVE-2007-1860 APPLE-SA-2007-07-31  View
273960 54031 CVE-2007-1860 SUSE-SR:2008:005  View
273961 54031 CVE-2007-1860 oval:org.mitre.oval:def:6002  View
273962 54031 CVE-2007-1860 GLSA-200708-15  View
273963 54031 CVE-2007-1860 http://tomcat.apache.org/connectors-doc/news/20070301.html#20070518.1  View
273964 54031 CVE-2007-1860 http://tomcat.apache.org/security-jk.html  View
273965 54031 CVE-2007-1860 DSA-1312  View
273966 54031 CVE-2007-1860 RHSA-2007:0379  View
273967 54031 CVE-2007-1860 RHSA-2008:0261  View
273968 54031 CVE-2007-1860 24147  View
273969 54031 CVE-2007-1860 25159  View
273970 54031 CVE-2007-1860 1018138  View
273971 54031 CVE-2007-1860 ADV-2007-1941  View
273972 54031 CVE-2007-1860 ADV-2007-2732  View
273973 54031 CVE-2007-1860 ADV-2007-3386  View
273974 54031 CVE-2007-1860 tomcat-jkconnector-security-bypass(34496)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51738 JVNDB-2007-000401 Apache Tomcat JK Web Server Connector におけるディレクトリトラバーサルの脆弱性 Apache Tomcat JK Web Server Connector (JK) モジュールには、リクエストされた URL を Tomcat に渡す前に Apache HTTP Server 内でデコード処理を行うため、ディレクトリトラバーサルの脆弱性が存在します。なお、本脆弱性は JVNDB-2007-000217 (CVE-2007-0450) に関連があります。 CVE-2007-1860 25215 CVE-2007-1860 54031 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000401.html 2007-05-25 2008-09-18 View