CVE-2014-8111

CVE-2014-8111 describes a vulnerability in Apache Tomcat Connectors (mod_jk) prior to version 1.2.41, where JkUnmount rules are improperly ignored for subtrees of previously defined JkMount rules. This flaw allows unauthorized remote attackers to access restricted artifacts, potentially leading to information disclosure. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it indicates a network-exploitable vulnerability with low attack complexity, requiring no authentication, and primarily impacting confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.