Security Advisory for Multiple Vulnerabilities in Apache Tomcat

Summary

A number of vulnerabilities have been discovered on Apache Tomcat. If exploited, these security flaws may expose NAS devices using Tomcat 7.0.75 or earlier to possible remote code execution attacks or allow attackers to access sensitive information.

Apache has already fixed these vulnerabilities in Tomcat 7.0.81.

Recommendations

To resolve the issue, you must update your Apache Tomcat to version 7.0.81.

Upgrading to Apache Tomcat to Version 7.0.81

1. Log on to QTS as administrator.
2. Open the App Center, and then click the Search icon.
   A search box appears.
3. Type “Tomcat”, and then press ENTER.
   The Apache Tomcat application appears in the search results list.
4. Click Update.
   A confirmation message appears.
5. Click OK.
   The application is updated.