SynopsisApache Tomcat 8.5.x < 8.5.28 Security Constraint Weakness
DescriptionThe version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.28. It is, therefore, affected by security constraints flaws which could expose resources to unauthorized users.
Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.
SolutionUpgrade to Apache Tomcat version 8.5.28 or later.