Tomcat allows auto deployment of applications while Tomcat is running. It is recommended that this capability be disabled. Rationale: This could allow malicious or untested applications to be deployed and should be disabled.
In the $CATALINA_HOME/conf/server.xml file, change autoDeploy to false. autoDeploy='false' Default Value: autoDeploy is set to true.