Security Apache Tomcat 9.0.0.M13 / 8.5.8 Information Disclosure December 12, 2016 007admin Leave a comment Apache Tomcat versions 9.0.0.M1 to 9.0.0.M13 and 8.5.0 to 8.5.8 suffer from an information disclosure vulnerability.