CVE:CVE-2021-33037
CNNVD:CNNVD-202107-681
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat存在环境问题漏洞，该漏洞源于Apache Tomcat 在某些情况下没有正确解析 HTTP 传输编码请求标头，导致在与反向代理一起使用时可能会请求走私。
solution:Upgrade apache tomcat to a higher version than 8.5.66,9.0.46,10.0.6,and avoid the version [8.5.0,8.5.66],(9.0.0,9.0.46],(10.0.0,10.0.6]; Upgrade apache tomee to a higher version than 8.0.6,and avoid the version 8.0.6; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0.2,and avoid the version [8.0.0.0,8.5.0.2]; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.5.0,and avoid the version 10.0.1.5.0; Upgrade oracle communications_policy_management to a higher version than 12.5.0,and avoid the version 12.5.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_session_report_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0,8.2.4.0]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.4,and avoid the version [8.0.0,8.2.4]; Upgrade oracle graph_server_and_client to a higher version than 21.4,and avoid the version (,21.4); Upgrade oracle healthcare_translational_research to a higher version than 4.1.0,and avoid the version 4.1.0; Upgrade oracle hospitality_cruise_shipboard_property_management_system to a higher version than 20.1.0,and avoid the version 20.1.0; Upgrade oracle instantis_enterprisetrack to a higher version than 17.1,17.2,17.3,and avoid the version 17.1,17.2,17.3; Upgrade oracle managed_file_transfer to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.25,and avoid the version (,8.0.25]; Upgrade oracle sd-wan_edge to a higher version than 9.0,9.1,and avoid the version 9.0,9.1; Upgrade oracle secure_global_desktop to a higher version than 5.6,and avoid the version 5.6; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1,and avoid the version 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1; Upgrade mcafee epolicy_orchestrator to a higher version than 5.10.0,5.10.0,5.10.0:update_1,5.10.0:update_10,5.10.0:update_2,5.10.0:update_3,5.10.0:update_4,5.10.0:update_5,5.10.0:update_6,5.10.0:update_7,5.10.0:update_8,5.10.0:update_9,and avoid the version (,5.10.0),5.10.0,5.10.0:update_1,5.10.0:update_10,5.10.0:update_2,5.10.0:update_3,5.10.0:update_4,5.10.0:update_5,5.10.0:update_6,5.10.0:update_7,5.10.0:update_8,5.10.0:update_9