Ubuntu Security Update USN-6826-1: mod_jk vulnerability

[LinuxBot]

Karl von Randow discovered that mod_jk was vulnerable to an authentication bypass. If the configuration did not provide explicit mounts for all possible proxied requests, an attacker could possibly use this vulnerability to bypass security constraints configured in httpd.

Continue reading...