Apache Tomcat JK Web Server Connector Path Traversal Information Disclosure Vulnerability (CVE-2018-11759):

Article Id: 194594

Status: Published

Updated On: 08-07-2020 09:13

Products:

CA Single Sign On Secure Proxy Server (SiteMinder) , CA Single Sign On Agents (SiteMinder) , CA Single Sign On Federation (SiteMinder) , CA Single Sign On SOA Security Manager (SiteMinder) , SITEMINDER

Issue/Introduction:

We would like to seek your help to resolving the high vulnerability which reported by our Qaulys Report:

Apache Tomcat JK Web Server Connector Path Traversal Information Disclosure Vulnerability (CVE-2018-11759)

Environment:

Release : 12.8

Component : SITEMINDER -WEB AGENT FOR APACHE

Resolution:

Please ask support for mod_jk_1.2.46_linux_x64.zip fix.