USN-6826-1: mod_jk vulnerability

Karl von Randow discovered that mod_jk was vulnerable to an authentication
bypass. If the configuration did not provide explicit mounts for all
possible proxied requests, an attacker could possibly use this
vulnerability to bypass security constraints configured in httpd.

attacker authentication authentication bypass bypass configuration constraints explicit httpd requests security usn vulnerability vulnerable