Local Apache Tomcat Identification

Change

Nessus plugin 39446 identifies installations of Apache Tomcat remotely. Due to security hardening and intermediate devices, it may not be possible to identify Tomcat based on remote information. New plugins will identify Tomcat on Linux and Windows systems when run with credentials or through Nessus agents.

Impact

You may see additional Apache Tomcat installs identified, and corresponding vulnerabilities if they are out of date.

If you experience what you believe is a false positive scan result because of this change, please contact Tenable Customer Support.

Plugins Added

Apache Tomcat Installed (Linux) - 130175

Apache Tomcat Installed (Windows) - 130590

Target Release Date

31 October 2019

__________________________________

Tenable Research Release Highlights are posted in advance of significant new releases or updates to existing plugins or audit files that are important for early customer notification.