> ## Content Index
> Fetch the complete content index at: https://helpmonks.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Tomcat AJP vulnerability and Razuna
- URL: https://helpmonks.com/blog/tomcat-ajp-vulnerability-and-razuna/
- Published: 2020-03-06T00:00:00.000Z
- Updated: 2026-04-06T20:06:09.000Z
- Description: We got notified that there is an AJP security vulnerability with all Apache Tomcat releases. The issue is discussed as CVE-2929-1938 has the AJP connector di
- Author: Nitai
- Tags: email marketing

We got notified that there is an AJP security vulnerability with all Apache Tomcat releases. The issue is discussed as [CVE-2929-1938](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1938&ref=helpmonks.com). A remote, unauthenticated/untrusted attacker could exploit this AJP configuration to read web application files from a server exposing the AJP port to untrusted clients.

That said, the default Tomcat instance that is included in our [Razuna download](https://razuna.org/?ref=helpmonks.com) has the AJP connector **disabled by default**. Also, all customers of our [dedicated Razuna servers](https://razuna.com/?ref=helpmonks.com), are **already protected**!

However, if you installed Razuna on your customer Tomcat installation, please make sure to disable the AJP connector in the server.xml file that can be found in the tomcat/config folder.