Is CVE-2023-41081 in the CISA KEV catalog?

No. CVE-2023-41081 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-41081?

CVE-2023-41081 has a CVSS v3 base score of 7.5 (HIGH).

What is the EPSS score for CVE-2023-41081?

CVE-2023-41081 has an EPSS score of 1.26% (66th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-41081?

Upgrade libapache-mod-jk on debian 11 to 1:1.2.48-1+deb11u1 or later. Fixes are available for 135 affected products.

CVE & CISA-KEV Catalog

CVE-2023-41081

HIGH

7.5

CVSS v3

NVD

Description

Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, mod_jk would use an implicit mapping and map the request to the first defined worker. Such an implicit mapping could result in the unintended exposure of the status worker and/or bypass security constraints configured in httpd. As of JK 1.2.49, the implicit mapping functionality has been removed and all mappings must now be via explicit configuration. Only mod_jk is affected by this issue. The ISAPI redirector is not affected. This issue affects Apache Tomcat Connectors (mod_jk only): from 1.2.0 through 1.2.48. Users are recommended to upgrade to version 1.2.49, which fixes the issue. History 2023-09-13 Original advisory 2023-09-28 Updated summary

How to fix

Remediation Available

libapache-mod-jkDebian

Fixed in:1:1.2.48-1+deb11u1CVE-2023-41081

Fixed in:1:1.2.48-2+deb12u1CVE-2023-41081

Fixed in:1:1.2.49-1CVE-2023-41081

jbcs-httpd24-apr-utilRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-utilRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-debuginfoRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-develRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-develRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-ldapRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-ldapRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-ldap-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-ldap-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-mysqlRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-mysqlRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-mysql-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-mysql-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-nssRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-nssRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-nss-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-nss-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-odbcRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-odbcRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-odbc-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-odbc-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-opensslRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-opensslRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-openssl-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-openssl-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-pgsqlRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-pgsqlRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-pgsql-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-pgsql-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-sqliteRed Hat / RHEL

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-sqliteRocky

Fixed in:0:1.6.1-103.el7jbcsRHSA-2023:7625

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-sqlite-debuginfoRocky

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-apr-util-sqlite-debuginfoRed Hat / RHEL

Fixed in:0:1.6.1-103.el8jbcsRHSA-2023:7625

jbcs-httpd24-curlRed Hat / RHEL

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-curlRocky

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-curl-debuginfoRocky

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-curl-debuginfoRed Hat / RHEL

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpdRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpdRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-debuginfoRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-debuginfoRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-develRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-develRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-manualRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-manualRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-selinuxRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-selinuxRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-toolsRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-toolsRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-tools-debuginfoRed Hat / RHEL

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-httpd-tools-debuginfoRocky

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-libcurlRocky

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-libcurlRed Hat / RHEL

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-libcurl-debuginfoRocky

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-libcurl-debuginfoRed Hat / RHEL

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-libcurl-develRed Hat / RHEL

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-libcurl-develRocky

Fixed in:0:8.4.0-2.el7jbcsRHSA-2023:7625

Fixed in:0:8.4.0-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_http2Red Hat / RHEL

Fixed in:0:1.15.19-32.el7jbcsRHSA-2023:7625

Fixed in:0:1.15.19-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_http2Rocky

Fixed in:0:1.15.19-32.el7jbcsRHSA-2023:7625

Fixed in:0:1.15.19-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_http2-debuginfoRocky

Fixed in:0:1.15.19-32.el7jbcsRHSA-2023:7625

Fixed in:0:1.15.19-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_http2-debuginfoRed Hat / RHEL

Fixed in:0:1.15.19-32.el7jbcsRHSA-2023:7625

Fixed in:0:1.15.19-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jkRocky

Fixed in:0:1.2.49-1.redhat_1.el7jbcsRHSA-2023:7625

Fixed in:0:1.2.49-1.redhat_1.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jkRed Hat / RHEL

Fixed in:0:1.2.49-1.redhat_1.el7jbcsRHSA-2023:7625

Fixed in:0:1.2.49-1.redhat_1.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jk-ap24Rocky

Fixed in:0:1.2.49-1.redhat_1.el7jbcsRHSA-2023:7625

Fixed in:0:1.2.49-1.redhat_1.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jk-ap24Red Hat / RHEL

Fixed in:0:1.2.49-1.redhat_1.el7jbcsRHSA-2023:7625

Fixed in:0:1.2.49-1.redhat_1.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jk-ap24-debuginfoRocky

Fixed in:0:1.2.49-1.redhat_1.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jk-ap24-debuginfoRed Hat / RHEL

Fixed in:0:1.2.49-1.redhat_1.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_jk-debuginfoRocky

Fixed in:0:1.2.49-1.redhat_1.el7jbcsRHSA-2023:7625

jbcs-httpd24-mod_jk-debuginfoRed Hat / RHEL

Fixed in:0:1.2.49-1.redhat_1.el7jbcsRHSA-2023:7625

jbcs-httpd24-mod_ldapRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_ldapRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_ldap-debuginfoRed Hat / RHEL

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_ldap-debuginfoRocky

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_mdRed Hat / RHEL

Fixed in:1:2.4.24-2.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.24-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_mdRocky

Fixed in:1:2.4.24-2.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.24-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_md-debuginfoRocky

Fixed in:1:2.4.24-2.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.24-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_md-debuginfoRed Hat / RHEL

Fixed in:1:2.4.24-2.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.24-2.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_clusterRocky

Fixed in:0:1.3.19-7.el7jbcsRHSA-2023:7625

Fixed in:0:1.3.19-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_clusterRed Hat / RHEL

Fixed in:0:1.3.19-7.el7jbcsRHSA-2023:7625

Fixed in:0:1.3.19-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_cluster-debuginfoRocky

Fixed in:0:1.3.19-7.el7jbcsRHSA-2023:7625

Fixed in:0:1.3.19-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_cluster-debuginfoRed Hat / RHEL

Fixed in:0:1.3.19-7.el7jbcsRHSA-2023:7625

Fixed in:0:1.3.19-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_htmlRed Hat / RHEL

Fixed in:1:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_htmlRocky

Fixed in:1:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_html-debuginfoRed Hat / RHEL

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_proxy_html-debuginfoRocky

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_securityRed Hat / RHEL

Fixed in:0:2.9.3-32.el7jbcsRHSA-2023:7625

Fixed in:0:2.9.3-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_securityRocky

Fixed in:0:2.9.3-32.el7jbcsRHSA-2023:7625

Fixed in:0:2.9.3-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_security-debuginfoRed Hat / RHEL

Fixed in:0:2.9.3-32.el7jbcsRHSA-2023:7625

Fixed in:0:2.9.3-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_security-debuginfoRocky

Fixed in:0:2.9.3-32.el7jbcsRHSA-2023:7625

Fixed in:0:2.9.3-32.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_sessionRocky

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_sessionRed Hat / RHEL

Fixed in:0:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_session-debuginfoRed Hat / RHEL

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_session-debuginfoRocky

Fixed in:0:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_sslRocky

Fixed in:1:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_sslRed Hat / RHEL

Fixed in:1:2.4.57-7.el7jbcsRHSA-2023:7625

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_ssl-debuginfoRocky

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-mod_ssl-debuginfoRed Hat / RHEL

Fixed in:1:2.4.57-7.el8jbcsRHSA-2023:7625

jbcs-httpd24-opensslRed Hat / RHEL

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-opensslRocky

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-chilRocky

Fixed in:0:1.0.0-19.el7jbcsRHSA-2023:7625

Fixed in:0:1.0.0-19.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-chilRed Hat / RHEL

Fixed in:0:1.0.0-19.el7jbcsRHSA-2023:7625

Fixed in:0:1.0.0-19.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-chil-debuginfoRed Hat / RHEL

Fixed in:0:1.0.0-19.el7jbcsRHSA-2023:7625

Fixed in:0:1.0.0-19.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-chil-debuginfoRocky

Fixed in:0:1.0.0-19.el7jbcsRHSA-2023:7625

Fixed in:0:1.0.0-19.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-debuginfoRocky

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-debuginfoRed Hat / RHEL

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-develRocky

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-develRed Hat / RHEL

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-libsRed Hat / RHEL

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-libsRocky

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-libs-debuginfoRocky

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-libs-debuginfoRed Hat / RHEL

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-perlRocky

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-perlRed Hat / RHEL

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-pkcs11Rocky

Fixed in:0:0.4.10-34.el7jbcsRHSA-2023:7625

Fixed in:0:0.4.10-34.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-pkcs11Red Hat / RHEL

Fixed in:0:0.4.10-34.el7jbcsRHSA-2023:7625

Fixed in:0:0.4.10-34.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-pkcs11-debuginfoRed Hat / RHEL

Fixed in:0:0.4.10-34.el7jbcsRHSA-2023:7625

Fixed in:0:0.4.10-34.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-pkcs11-debuginfoRocky

Fixed in:0:0.4.10-34.el7jbcsRHSA-2023:7625

Fixed in:0:0.4.10-34.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-staticRocky

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

jbcs-httpd24-openssl-staticRed Hat / RHEL

Fixed in:1:1.1.1k-16.el7jbcsRHSA-2023:7625

Fixed in:1:1.1.1k-16.el8jbcsRHSA-2023:7625

mod_jkRed Hat / RHEL

Fixed in:0:1.2.49-1.el9_4RHSA-2024:2387

mod_jkRocky

Fixed in:0:1.2.49-1.el9_4RHSA-2024:2387

mod_jk-debuginfoRocky

Fixed in:0:1.2.49-1.el9_4RHSA-2024:2387

mod_jk-debuginfoRed Hat / RHEL

Fixed in:0:1.2.49-1.el9_4RHSA-2024:2387

mod_jk-debugsourceRocky

Fixed in:0:1.2.49-1.el9_4RHSA-2024:2387

mod_jk-debugsourceRed Hat / RHEL

Fixed in:0:1.2.49-1.el9_4RHSA-2024:2387

mod_proxy_clusterRed Hat / RHEL

Fixed in:0:1.3.20-1.el9_4RHSA-2024:2387

mod_proxy_clusterRocky

Fixed in:0:1.3.20-1.el9_4RHSA-2024:2387

mod_proxy_cluster-debuginfoRed Hat / RHEL

Fixed in:0:1.3.20-1.el9_4RHSA-2024:2387

mod_proxy_cluster-debuginfoRocky

Fixed in:0:1.3.20-1.el9_4RHSA-2024:2387

mod_proxy_cluster-debugsourceRed Hat / RHEL

Fixed in:0:1.3.20-1.el9_4RHSA-2024:2387

mod_proxy_cluster-debugsourceRocky

Fixed in:0:1.3.20-1.el9_4RHSA-2024:2387

libapache-mod-jkUbuntu

Fixed in:1:1.2.41-1ubuntu0.1~esm1USN-6826-1

Fixed in:1:1.2.43-1ubuntu0.1~esm1USN-6826-1

Fixed in:1:1.2.46-1ubuntu0.1USN-6826-1

Fixed in:1:1.2.48-1ubuntu0.1USN-6826-1

Fixed in:1:1.2.48-2ubuntu0.1USN-6826-1

libapache2-mod-jkUbuntu

Fixed in:1:1.2.41-1ubuntu0.1~esm1USN-6826-1

Fixed in:1:1.2.43-1ubuntu0.1~esm1USN-6826-1

Fixed in:1:1.2.46-1ubuntu0.1USN-6826-1

Fixed in:1:1.2.48-1ubuntu0.1USN-6826-1

Fixed in:1:1.2.48-2ubuntu0.1USN-6826-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploit Intelligence

1.26%probability of exploitation in 30 days

66thpercentile

Moderate risk: more likely to be exploited than 66% of all known CVEs.

References

Mailing List1

lists.apache.org

Other references3

Embed a live status badge for CVE-2023-41081

Markdown

[![CVE-2023-41081](https://tridentstack.com/cve/badge/CVE-2023-41081.svg)](https://tridentstack.com/cve/CVE-2023-41081)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-41081"><img src="https://tridentstack.com/cve/badge/CVE-2023-41081.svg" alt="CVE-2023-41081"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.