Environment
Micro Focus Vibe 4.0.3
Situation
Vibe 4.0.3 shipped with Apache Tomcat version 8.0.33. A number of security issues have been identified and addressed since the 8.0.33 release as listed here: Apache Tomcat 8.x vulnerabilities
Vibe's Tomcat must be updated to the latest version, 8.0.44.
Vibe's Tomcat must be updated to the latest version, 8.0.44.
Resolution
Update to Apache Tomcat v8.0.44 is available in the Vibe 4.0.3 - Patch 1, available via the Micro Focus Patch Finder.
Additional Information
List of Apache Tomcat 8.x vulnerabilities is available at: Apache Tomcat 8.x vulnerabilities