Signature Detail
Short Name |
HTTP:TOMCAT:ADMIN-SCAN |
|---|---|
Severity |
Low |
Recommended |
Yes |
Category |
HTTP |
Keywords |
Apache Tomcat Security Scan Recon infoleak |
Release Date |
2014/08/14 |
Update Number |
2408 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Apache Tomcat Administration Page Scan
This signature detects attempts to discover Apache Tomcat-powered websites. This is not normally accessed by users, and is generally an indication of a security scan. A successful access confirms the Tomcat installation and reveals the Tomcat version number. You may be auditing your website's security, or this could be an indication of the intelligence collection phase of a hack attack. The source IP is potentially hostile.
References