Apache Tomcat directory host Appbase authentication bypass vulnerability

Description
  • This alert was generated using only banner information. It may be a false positive.

    Apache Tomcat is prone to an authentication-bypass vulnerability. An attacker can gain unauthorized access to files and directories. Successful exploits may lead to other attacks.

    Affected Apache Tomcat version (5.5.0 - 5.5.28).
    Affected Apache Tomcat version (6.0.0 - 6.0.20).
Remediation
  • Upgrade Apache Tomcat to the latest version.
References