CVE:CVE-2018-11759
CNNVD:CNNVD-201810-1558
Apache Tomcat JK（mod_jk）Connector是美国阿帕奇（Apache）软件基金会的一款为Apache或IIS提供连接后台Tomcat的模块，它支持集群和负载均衡等。
Apache Tomcat JK（mod_jk）Connector 1.2.0版本至1.2.44版本中存在目录遍历漏洞。攻击者可利用该漏洞造成信息泄露。
solution:Upgrade apache tomcat_jk_connector to a higher version than 1.2.44,and avoid the version [1.2.0,1.2.44]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat jboss_core_services to a higher version than -