Vulnerability Details CVE-2008-5519
The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.058
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 2.6
Products affected by CVE-2008-5519
-
cpe:2.3:a:apache:mod_jk:1.2
-
cpe:2.3:a:apache:mod_jk:1.2.1
-
cpe:2.3:a:apache:mod_jk:1.2.10
-
cpe:2.3:a:apache:mod_jk:1.2.11
-
cpe:2.3:a:apache:mod_jk:1.2.12
-
cpe:2.3:a:apache:mod_jk:1.2.13
-
cpe:2.3:a:apache:mod_jk:1.2.14
-
cpe:2.3:a:apache:mod_jk:1.2.14.1
-
cpe:2.3:a:apache:mod_jk:1.2.15
-
cpe:2.3:a:apache:mod_jk:1.2.16
-
cpe:2.3:a:apache:mod_jk:1.2.17
-
cpe:2.3:a:apache:mod_jk:1.2.18
-
cpe:2.3:a:apache:mod_jk:1.2.19
-
cpe:2.3:a:apache:mod_jk:1.2.20
-
cpe:2.3:a:apache:mod_jk:1.2.21
-
cpe:2.3:a:apache:mod_jk:1.2.22
-
cpe:2.3:a:apache:mod_jk:1.2.23
-
cpe:2.3:a:apache:mod_jk:1.2.24
-
cpe:2.3:a:apache:mod_jk:1.2.25
-
cpe:2.3:a:apache:mod_jk:1.2.26
-
cpe:2.3:a:apache:mod_jk:1.2.6
-
cpe:2.3:a:apache:mod_jk:1.2.7
-
cpe:2.3:a:apache:mod_jk:1.2.8
-
cpe:2.3:a:apache:mod_jk:1.2.9
-
cpe:2.3:a:apache:tomcat:4.0.0
-
cpe:2.3:a:apache:tomcat:4.0.1
-
cpe:2.3:a:apache:tomcat:4.0.2
-
cpe:2.3:a:apache:tomcat:4.0.3
-
cpe:2.3:a:apache:tomcat:4.0.4
-
cpe:2.3:a:apache:tomcat:4.0.5
-
cpe:2.3:a:apache:tomcat:4.0.6
-
cpe:2.3:a:apache:tomcat:4.1.0
-
cpe:2.3:a:apache:tomcat:4.1.1
-
cpe:2.3:a:apache:tomcat:4.1.10
-
cpe:2.3:a:apache:tomcat:4.1.11
-
cpe:2.3:a:apache:tomcat:4.1.12
-
cpe:2.3:a:apache:tomcat:4.1.13
-
cpe:2.3:a:apache:tomcat:4.1.14
-
cpe:2.3:a:apache:tomcat:4.1.15
-
cpe:2.3:a:apache:tomcat:4.1.16
-
cpe:2.3:a:apache:tomcat:4.1.17
-
cpe:2.3:a:apache:tomcat:4.1.18
-
cpe:2.3:a:apache:tomcat:4.1.19
-
cpe:2.3:a:apache:tomcat:4.1.2
-
cpe:2.3:a:apache:tomcat:4.1.20
-
cpe:2.3:a:apache:tomcat:4.1.21
-
cpe:2.3:a:apache:tomcat:4.1.22
-
cpe:2.3:a:apache:tomcat:4.1.23
-
cpe:2.3:a:apache:tomcat:4.1.24
-
cpe:2.3:a:apache:tomcat:4.1.25
-
cpe:2.3:a:apache:tomcat:4.1.26
-
cpe:2.3:a:apache:tomcat:4.1.27
-
cpe:2.3:a:apache:tomcat:4.1.28
-
cpe:2.3:a:apache:tomcat:4.1.29
-
cpe:2.3:a:apache:tomcat:4.1.3
-
cpe:2.3:a:apache:tomcat:4.1.30
-
cpe:2.3:a:apache:tomcat:4.1.31
-
cpe:2.3:a:apache:tomcat:4.1.32
-
cpe:2.3:a:apache:tomcat:4.1.33
-
cpe:2.3:a:apache:tomcat:4.1.34
-
cpe:2.3:a:apache:tomcat:4.1.35
-
cpe:2.3:a:apache:tomcat:4.1.36
-
cpe:2.3:a:apache:tomcat:4.1.4
-
cpe:2.3:a:apache:tomcat:4.1.5
-
cpe:2.3:a:apache:tomcat:4.1.6
-
cpe:2.3:a:apache:tomcat:4.1.7
-
cpe:2.3:a:apache:tomcat:4.1.8
-
cpe:2.3:a:apache:tomcat:4.1.9
-
cpe:2.3:a:apache:tomcat:5.0.0
-
cpe:2.3:a:apache:tomcat:5.0.1
-
cpe:2.3:a:apache:tomcat:5.0.10
-
cpe:2.3:a:apache:tomcat:5.0.11
-
cpe:2.3:a:apache:tomcat:5.0.12
-
cpe:2.3:a:apache:tomcat:5.0.13
-
cpe:2.3:a:apache:tomcat:5.0.14
-
cpe:2.3:a:apache:tomcat:5.0.15
-
cpe:2.3:a:apache:tomcat:5.0.16
-
cpe:2.3:a:apache:tomcat:5.0.17
-
cpe:2.3:a:apache:tomcat:5.0.18
-
cpe:2.3:a:apache:tomcat:5.0.19
-
cpe:2.3:a:apache:tomcat:5.0.2
-
cpe:2.3:a:apache:tomcat:5.0.21
-
cpe:2.3:a:apache:tomcat:5.0.22
-
cpe:2.3:a:apache:tomcat:5.0.23
-
cpe:2.3:a:apache:tomcat:5.0.24
-
cpe:2.3:a:apache:tomcat:5.0.25
-
cpe:2.3:a:apache:tomcat:5.0.26
-
cpe:2.3:a:apache:tomcat:5.0.27
-
cpe:2.3:a:apache:tomcat:5.0.28
-
cpe:2.3:a:apache:tomcat:5.0.29
-
cpe:2.3:a:apache:tomcat:5.0.3
-
cpe:2.3:a:apache:tomcat:5.0.30
-
cpe:2.3:a:apache:tomcat:5.0.4
-
cpe:2.3:a:apache:tomcat:5.0.5
-
cpe:2.3:a:apache:tomcat:5.0.6
-
cpe:2.3:a:apache:tomcat:5.0.7
-
cpe:2.3:a:apache:tomcat:5.0.8
-
cpe:2.3:a:apache:tomcat:5.0.9
-
cpe:2.3:a:apache:tomcat:5.5.0
-
cpe:2.3:a:apache:tomcat:5.5.1
-
cpe:2.3:a:apache:tomcat:5.5.10
-
cpe:2.3:a:apache:tomcat:5.5.11
-
cpe:2.3:a:apache:tomcat:5.5.12
-
cpe:2.3:a:apache:tomcat:5.5.13
-
cpe:2.3:a:apache:tomcat:5.5.14
-
cpe:2.3:a:apache:tomcat:5.5.15
-
cpe:2.3:a:apache:tomcat:5.5.16
-
cpe:2.3:a:apache:tomcat:5.5.17
-
cpe:2.3:a:apache:tomcat:5.5.18
-
cpe:2.3:a:apache:tomcat:5.5.19
-
cpe:2.3:a:apache:tomcat:5.5.2
-
cpe:2.3:a:apache:tomcat:5.5.20
-
cpe:2.3:a:apache:tomcat:5.5.21
-
cpe:2.3:a:apache:tomcat:5.5.22
-
cpe:2.3:a:apache:tomcat:5.5.23
-
cpe:2.3:a:apache:tomcat:5.5.24
-
cpe:2.3:a:apache:tomcat:5.5.25
-
cpe:2.3:a:apache:tomcat:5.5.26
-
cpe:2.3:a:apache:tomcat:5.5.27
-
cpe:2.3:a:apache:tomcat:5.5.3
-
cpe:2.3:a:apache:tomcat:5.5.4
-
cpe:2.3:a:apache:tomcat:5.5.5
-
cpe:2.3:a:apache:tomcat:5.5.6
-
cpe:2.3:a:apache:tomcat:5.5.7
-
cpe:2.3:a:apache:tomcat:5.5.8
-
cpe:2.3:a:apache:tomcat:5.5.9