Tag

ajp-connector

Safeguard articles tagged "ajp-connector" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2020-1938 (Ghostcat): File inclusion via Apache Tomca...

Ghostcat (CVE-2020-1938) let attackers read files—and often achieve RCE—via Tomcat's default, unauthenticated AJP connector. Here's the risk, fix, and KEV context.

Sep 24, 20257 min read