
Note that the scanner has not attempted to. This allows a remote attacker to conduct client-side and server-side cache poisoning attacks. It is, therefore, affected by a flaw in the CORS filter where the HTTP Vary header is not properly added. Make sure that in the process command line options such as -Dcatalina.base, and -classpath make sense. The version of Apache Tomcat installed on the remote host is 7.0.41 or later but prior to 7.0.79. I had a situation where due to an outdated Tomcat setenv.sh, A Tomcat 8 started with classes from a Tomcat 7 on the classpath. One can run on subtle weird behaviors due to (operating system) environment variables and (Java) system properties being set to unexpected values. usr/lib/jvm/java-8-openjdk-amd64/bin/java .file=/srv/tomcat-instances/bla/conf/logging.properties =true -Xmx4096M -XX:+UseConcMarkSweepGC =2048 = -agentlib:jdwp=transport=dt_socket,address=8000,server=y,suspend=n -Xmx4096m -Xms4096m -XX:MaxPermSize=2048m .authenticate=false .ssl=false .port=8090 .rmi.port=8090 =localhost =/opt/apache-tomcat-8.0.47/endorsed -classpath /opt/apache-tomcat-8.0.47/bin/bootstrap.jar:/opt/apache-tomcat-8.0.47/bin/tomcat-juli.jar -Dcatalina.base=/srv/tomcat-instances/bla =/opt/apache-tomcat-8.0.47 -Djava.io.tmpdir=/tmp/tomcat8-bla-tmp .Bootstrap start In Unix-like environments, I also recommend checking the actual running process command line: $ ps aux | grep java This will output the Tomcat Version you are running.Then try to open the JSP via Tomcat in the Browser.Check Tomcat Version in Linux Command Line ps -ef |grep -i tomcat // this is will output and you will need to eye-ball to find version, sample belowĮxecute the following CMD in terminal, you will need to locate Lib folder in Tomcat java -cp tomcat/lib/catalina.jar .ServerInfo Execute the script either way: sh version.sh OR.

Check for version.sh script exists, i.e.Locate the Tomcat`s bin Directory that is being used.

Linux via Version Script in Tomcat Bin Directory: These Following 4 ways can be used to find out Apache Tomcat Version in Linux:ġ).
