[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXwApi7C-5YbKhDCenxCdo2PJYkpwoIO4TF0XOSz02v0":3,"g5a-risk:CVE-2023-41081":107},{"success":4,"data":5,"meta":104},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":60,"weaknesses":61,"weaknessesCount":42,"isActivelyExploited":65,"cisaInfo":26,"otxData":26,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":102,"notableEvents":103},"CVE-2023-41081","What is CVE-2023-41081?","Important: Authentication Bypass CVE-2023-41081\n\nThe mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included \"JkOptions +ForwardDirectories\" but the configuration did not       provide explicit mounts for all possible proxied requests, mod_jk would       use an implicit mapping and map the request to the first defined worker. Such an implicit mapping could result in the unintended exposure of the status worker and\u002For bypass security constraints configured in httpd. As of JK 1.2.49, the implicit mapping functionality has been removed and all mappings must now be via explicit configuration. Only mod_jk is affected by this issue. The ISAPI redirector is not affected.\n\nThis issue affects Apache Tomcat Connectors (mod_jk only): from 1.2.0 through 1.2.48.\n\nUsers are recommended to upgrade to version 1.2.49, which fixes the issue.\n\nHistory\n2023-09-13 Original advisory\n\n2023-09-28 Updated summary","Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included...","2023-09-13T10:15:07.657","2024-09-25T18:35:03.13",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.01257,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"apache","tomcat_connectors","*","cpe:2.3:a:apache:tomcat_connectors:*:*:*:*:*:*:*:*",1,[44,48,53,57],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F09\u002F28\u002F7","Openwall",[],{"url":49,"source":50,"tags":51},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Frd1r26w7271jyqgzr4492tooyt583d8b","Apache",[52],"Mailing List",{"url":54,"source":55,"tags":56},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F09\u002Fmsg00027.html","Debian",[],{"url":58,"source":46,"tags":59},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F09\u002F13\u002F2",[],4,[62],{"id":63,"name":63,"description":64},"Unknown","NVD-CWE-noinfo",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2023-41081? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-41081, a high severity cyber security vulnerability from 2023. Important: Authentication Bypass CVE-2023-41081 The mod_jk ...","CVE-2023-41081, CVE-2023-41081 vulnerability, CVE-2023-41081 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, apache security, tomcat_connectors vulnerability","\u002Fwhat-is\u002Fcve-2023-41081",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-41081","Cybersecurity","CVE-2023-41081, CVE-2023-41081 vulnerability, CVE-2023-41081 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":26,"Negate":26,"Nodes":94},[95],{"Operator":96,"Negate":26,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":100,"VersionEndExcluding":101,"VersionEndIncluding":26},"9349521D-9E00-44E9-A1FF-E12C299CFEFA","1.2.0","1.2.49",[],[],{"lastModified":11,"cacheTime":105,"version":106},1793203545964,"2.0",{"score":108,"band":109,"action":110,"scoredAt":111},47,"Medium","Plan remediation","2026-07-01T10:31:03.369676+00:00"]