CVE:CVE-2020-1938
CNNVD:CNNVD-202002-1052
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat 7.0.100版本之前的7.*版本、8.5.51版本之前的8.*版本和9.0.31版本之前的9.*版本中的Tomcat AJP协议存在安全漏洞。攻击者可利用该漏洞读取或包含Tomcat上所有webapp目录下的任意文件，如 webapp 配置文件或源代码等。
solution:Upgrade apache geode to a higher version than 1.12.0,and avoid the version 1.12.0; Upgrade apache tomcat to a higher version than 7.0.99,8.5.50,9.0.30,and avoid the version [7.0.0,7.0.99],[8.5.0,8.5.50],[9.0.0,9.0.30]; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32; Upgrade oracle agile_engineering_data_management to a higher version than 6.2.1.0,and avoid the version 6.2.1.0; Upgrade oracle agile_plm to a higher version than 9.3.3,9.3.5,9.3.6,and avoid the version 9.3.3,9.3.5,9.3.6; Upgrade oracle communications_element_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.4.0,and avoid the version 10.0.1.4.0; Upgrade oracle health_sciences_empirica_inspections to a higher version than 1.0.1.2,and avoid the version 1.0.1.2; Upgrade oracle health_sciences_empirica_signal to a higher version than 7.3.3,and avoid the version 7.3.3; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle instantis_enterprisetrack to a higher version than 17.3,and avoid the version [17.1,17.3]; Upgrade oracle mysql_enterprise_monitor to a higher version than 4.0.12,8.0.20,and avoid the version (,4.0.12],[8.0.0,8.0.20]; Upgrade oracle siebel_ui_framework to a higher version than 20.5,and avoid the version (,20.5]; Upgrade oracle transportation_management to a higher version than 6.3.7,and avoid the version 6.3.7; Upgrade oracle workload_manager to a higher version than 12.2.0.1,18c,19c,and avoid the version 12.2.0.1,18c,19c; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade blackberry good_control to a higher version than 5.2.58.38,and avoid the version (,5.2.58.38]; Upgrade blackberry workspaces_server to a higher version than 7.0.1,7.1.2,8.1.0,9.0,and avoid the version 7.0.1,7.1.2,8.1.0,9.0