Hi All,

In a few weeks we will have a PCI audit and in the Evenlog server we have some Apache tomcat vulnerabilities and cannot be resolved because Tomcat is bundled with Eventlog installation.

Recently we have updated to version 7.2

Attached is the result of these vulnerabilities ,te two that interest me are called "Apache Tomcat Multiple Content Lenght Headers Information Disclosure Vulnerability" and "Directory Listing"

What can i do to solve this?

Many thanks