mod_jk (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package mod_jk, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2023-41081 — CVSS 7.5 (high): Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a…
• CVE-2024-46544 — CVSS 5.9 (medium): Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing…
• CVE-2023-6710 — CVSS 5.4 (medium): A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias'…