LBN -- how to secure Apache TOMCAT server from vulnerability issue (CVE-2020-1938) named as 'GhostCat' for TIBCO MDM

LBN -- how to secure Apache TOMCAT server from vulnerability issue (CVE-2020-1938) named as 'GhostCat' for TIBCO MDM

book

Article ID: KB0075938

calendar_today

Updated On:

Products Versions
TIBCO MDM 9.0.0, 9.0.1, 9.0.2, 9.1.0, 9.1.1, 9.1.2, 9.2.0

Description

Updates to the existing version of Apache Tomcat® 9.0.17 for the TIBCO MDM Configurator

Disable the Apache Tomcat® AJP Connector
1. Take a backup of the existing server.xml file from $MQ_HOME/configurator/tomcat/conf/

2. Open the original server.xml file and delete or comment out the following line for the AJP Connector.
<Connector port="7009" protocol="AJP/1.3" redirectPort="7443"/>

3. Save the server.xml file.

4. Start the TIBCO MDM Configurator.

Issue/Introduction

LBN -- how to secure Apache TOMCAT server from vulnerability issue (CVE-2020-1938) named as 'GhostCat' for TIBCO MDM