• <div class="bb-coolbox"><span class="bb-dark">This alert was generated using only banner information. It may be a false positive. </span></div><br/> Apache Tomcat is prone to an authentication-bypass vulnerability. An attacker can gain unauthorized access to files and directories. Successful exploits may lead to other attacks.<br/><br/> <span class="bb-navy">Affected Apache Tomcat version (5.5.0 - 5.5.28).</span><br/> <span class="bb-navy">Affected Apache Tomcat version (6.0.0 - 6.0.20).</span><br/>

• Upgrade Apache Tomcat to the latest version.

• • Apache Tomcat Directory Host Appbase Authentication Bypass Vulnerability

• 

• CVE-2009-2901

• CWE-264

• Missing Update