CVE-2014-8111: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount ru...

Security readout for executives and security teams

This issue affects Apache Tomcat Connectors mod_jk before 1.2.41. A configuration intended to unmount or protect a subtree could be ignored, potentially exposing artifacts that administrators believed were restricted. The public bundle does not provide CVSS, CWE, exploit details, or confirmed active exploitation. Exposure is most likely in legacy Apache HTTP Server deployments using mod_jk to route requests to Tomcat, especially where JkUnmount rules protect sensitive subpaths. Systems already on mod_jk 1.2.41 or vendor-patched packages are less likely exposed. Prioritize if the organization still operates older Tomcat connector infrastructure or uses mod_jk path rules to protect sensitive content. The business risk is unintended exposure of restricted artifacts, but urgency cannot be rated precisely from the supplied evidence. Mitigation focus: Upgrade mod_jk to 1.2.41 or a vendor-patched package.; Apply relevant Red Hat or Debian security advisories where applicable.; Review JkMount and JkUnmount rules protecting sensitive subtrees..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.