Running Ubuntu20.04. Pretty vanilla install.
XWiki was installed with the following command:
apt-get install xwiki-common xwiki-mysql-common xwiki-tomcat9-mysql xwiki-solr-core xwiki-solr-events xwiki-solr-ratings xwiki-tomcat9-common mysql-server tomcat9 net-tools
Per nessus, we have an vulnerable version of Tomcat.
How do we address this?
Apache Tomcat 9.0.0.M1 < 9.0.36 DoS
Questions I have:
- How do i get the current version of tomcat on this platform?
- How do I ‘upgrade’ to a newer, nonvulnerable version?