CveMateVulnerability intelligence

CVE-2007-1860: apache tomcat_jk_web_server_connector

Modified

AliasesRHSA-2007:0379RHSA-2007:0380DEBIAN-CVE-2007-1860+1 more

Published 25-05-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1860 is a medium (CVSS 5.0) vulnerability in apache tomcat_jk_web_server_connector. EPSS estimates a 13.16% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

13.16%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2

RHSA-2008:0261 RHSA-2008:0524

Timeline

25-05-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

13.16%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 13.16% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted DirectoryThe product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat4 products

mod_jk< 0:1.2.20-1.el4s1.5 | < 0:1.2.20-1jpp_2rh
mod_jk-ap20< 0:1.2.20-1.el4s1.5 | < 0:1.2.20-1jpp_2rh
mod_jk-debuginfo< 0:1.2.20-1.el4s1.5 | < 0:1.2.20-1jpp_2rh
mod_jk-manual< 0:1.2.20-1.el4s1.5 | < 0:1.2.20-1jpp_2rh

Apache1 product

tomcat_jk_web_server_connector≤ 1.2.22

Debian1 product

libapache-mod-jk< 1:1.2.18-3etch1 | < 1:1.2.5-2sarge1 | < 1:1.2.23-1

3 vendors · 6 products

References

44 links

www.debian.org/security/2007/dsa-1312Vendor AdvisoryX Refsource DEBIAN
www.vupen.com/english/advisories/2007/2732VDB EntryX Refsource VUPENVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6002VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/25701Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29242Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/24147VDB EntryX Refsource BID
secunia.com/advisories/25383Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
lists.apple.com/archives/security-announce//2007/Jul/msg00004.htmlVendor AdvisoryX Refsource APPLE
lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.htmlVendor AdvisoryX Refsource SUSE
www.osvdb.org/34877VDB EntryX Refsource OSVDB

Show all 44 references

www.vupen.com/english/advisories/2007/1941VDB EntryX Refsource VUPENVendor Advisory
security.gentoo.org/glsa/glsa-200708-15.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2007-0379.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/3386VDB EntryX Refsource VUPENVendor Advisory
www.securitytracker.com/id?1018138VDB EntryX Refsource SECTRACK
secunia.com/advisories/27037Third Party AdvisoryX Refsource SECUNIAVendor Advisory
docs.info.apple.com/article.html?artnum=306172X Refsource CONFIRM
secunia.com/advisories/26512Third Party AdvisoryX Refsource SECUNIAVendor Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795Vendor AdvisoryX Refsource HP
tomcat.apache.org/connectors-doc/news/20070301.htmlX Refsource MISCPatch
tomcat.apache.org/security-jk.htmlX Refsource CONFIRMPatch
www.securityfocus.com/bid/25159VDB EntryX Refsource BID
www.redhat.com/support/errata/RHSA-2008-0261.htmlVendor AdvisoryX Refsource REDHAT
exchange.xforce.ibmcloud.com/vulnerabilities/34496VDB EntryX Refsource XF
secunia.com/advisories/26235Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
access.redhat.com/errata/RHSA-2007:0379Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=237656REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0379.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1860REPORT
www.cve.org/CVERecord?id=CVE-2007-1860Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1860Advisory
access.redhat.com/errata/RHSA-2007:0380Advisory
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0380.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2007-1860Advisory