| Vulnerability Name: | CVE-2007-1860 (CCN-34496) | ||||||||||||||||||||
| Assigned: | 2007-05-18 | ||||||||||||||||||||
| Published: | 2007-05-18 | ||||||||||||||||||||
| Updated: | 2023-02-13 | ||||||||||||||||||||
| Summary: | |||||||||||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2007-1860 Source: CCN Type: Apple Security Update 2007-007 About Security Update 2007-007 Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: Apple Web site Apple security updates Source: CCN Type: HP Security Bulletin HPSBUX02262 SSRT071447 HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (XSS) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: RHSA-2007-0379 Important: mod_jk security update Source: CCN Type: RHSA-2007-0380 Important: mod_jk security update Source: CCN Type: RHSA-2008-0261 Moderate: Red Hat Network Satellite Server security update Source: CCN Type: RHSA-2008-0524 Low: Red Hat Network Satellite Server security update Source: CCN Type: SA25383 Apache Tomcat JK Web Server Connector Double Encoded ".." Security Bypass Source: CCN Type: SA26235 Mac OS X Security Update Fixes Multiple Vulnerabilities Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: SECTRACK ID: 1018138 Tomcat JK Connector May Let Remote Users Access Restricted Resources Source: CCN Type: ASA-2007-215 mod_jk security update (RHSA-2007-0380) Source: CCN Type: ASA-2007-217 mod_jk security update (RHSA-2007-0379) Source: CCN Type: ASA-2007-416 HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (XSS) (HPSBUX02262) Source: CCN Type: ASA-2008-054 mod_jk vulnerability may lead to information disclosure (CVE-2007-1860) Source: CCN Type: The Apache Tomcat Connector - News - 2007 News and Status 18 May - JK-1.2.23 released Source: secalert@redhat.com Type: Patch secalert@redhat.com Source: CCN Type: Apache Tomcat Web site Fixed in Apache Tomcat JK Connector 1.2.23 Source: secalert@redhat.com Type: Patch secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: DEBIAN Type: DSA-1312 libapache-mod-jk -- programming error Source: CCN Type: GLSA-200708-15 Apache mod_jk: Directory traversal Source: CCN Type: OSVDB ID: 34877 Apache Tomcat JK Web Server Connector (mod_jk) Double Encoded Traversal Arbitrary File Access Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: BID-24147 Apache Tomcat JK Connector Double Encoding Security Bypass Vulnerability Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: BID-25159 Apple Mac OS X 2007-007 Multiple Security Vulnerabilities Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: XF Type: UNKNOWN tomcat-jkconnector-security-bypass(34496) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: SUSE Type: SUSE-SR:2008:005 SUSE Security Summary Report | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||