CVE-2020-1938 tomcat 9.0.69 compatible with SAP Business One 9.3?

[former_member831325]

I was told by the consultant that I'm having this issue (Ghostcat - Apache Tomcat AJP File Read/Inclusion Vulnerability (CVE-2020-1938) and the recommendation is update the AJP configuration to require authorization and/or upgrade the Tomcat server to 7.0.100, 8.5.51, 9.0.31 or later. I'm using the SAP Business One 9.3 and tomcat 8.5.41.

My question is tomcat 9.0.69 compatible with SAP Business One 9.3 or not?

[Former Member]

Thank you for visiting SAP Community to get answers to your questions. Since you're asking a question here for the first time, I recommend that you familiarize yourself with: https://community.sap.com/resources/questions-and-answers, as it provides tips for preparing questions that draw responses from our members.

For example, you can:

- outline what steps you took to find answers (and why they weren't helpful)

- share screenshots of what you've seen/done

- make sure you've applied the appropriate tags

- use a more descriptive subject line

The more details you provide, the more likely it is that members will be able to respond. Feel free to also take our Q&A tutorial at: https://developers.sap.com/tutorials/community-qa.html

Should you wish, you can revise your question by selecting Actions, then Edit.

By adding a picture to your profile you encourage readers to respond: https://developers.sap.com/tutorials/community-profile.html

Questions on how to draw responses from members? Check out this discussion on how to improve questions. https://groups.community.sap.com/t5/welcome-corner-discussions/advice-from-sap-champions-questions-a...

[former_member831325]

Or what would you guys do? To fix the vulnerability of CVE-2020-1938.