Tag

ajp

Safeguard articles tagged "ajp" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Ghostcat: Apache Tomcat AJP File Read and RCE (CVE-2020-1938) Explained

CVE-2020-1938 turned Tomcat's default AJP connector into a file-disclosure and RCE primitive. Here's how the request-attribute abuse works and how to shut it down.

Jul 1, 20266 min read