- Vendor / Project
- Apache
- Product
- Tomcat
- Date added
- Mar 3, 2022
- Due date
- Mar 17, 2022
- Known ransomware use
- Unknown
- CWEs
- —
Description
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
Required action
Apply updates per vendor instructions.