CVE-2014-8111: Apache Tomcat Connectors

Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days.

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

Affected products

• Apache Tomcat Connectors: up to and including 1.2.40

Published 2015-04-21. Last modified 2026-06-17.