i see referenced in this previous post

that some manageengine products are based on Apache Tomcat. given the most recent "ghostcat" exploit that was discovered, what is the eta for updates to use a version of tomcat which has this patched?

Exploit details:

Detailed Analysis:

Are there any steps that customers can take immediately to workaround this issue until a patch is released?