https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T21:32:08.547629+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-46544 CVE-2024-46544 — Apache Tomcat Connectors: mod_jk: local users can view and modify configuration 2026-10-04T21:32:08.550505+00:00

Affected: Apache Software Foundation Apache Tomcat Connectors

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.

This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.

Users are recommended to upgrade to version 1.2.50, which fixes the issue.

 https://vulnerability.circl.lu/vuln/usn-8369-1 USN-8369-1 — libapache-mod-jk vulnerability 2026-10-04T21:32:08.550603+00:00

Affected: Ubuntu:Pro:16.04:LTS: libapache-mod-jk, Ubuntu:Pro:18.04:LTS: libapache-mod-jk, Ubuntu:Pro:20.04:LTS: libapache-mod-jk, Ubuntu:Pro:22.04:LTS: libapache-mod-jk, Ubuntu:Pro:24.04:LTS: libapache-mod-jk

It was discovered that Apache Tomcat Connectors used incorrect default permissions for shared memory on Unix-like systems. A local attacker could possibly use this issue to view or modify mod_jk configuration data in shared memory, resulting in sensitive information exposure or a denial of service.