Disable AJP Connector for iDash

Products

• iDash Workload Automation

Issue/Introduction

Is it possible to disable the AJP Connector for "iDash" to avoid CVE-2020-1938 vulnerability?

Resolution

iDash does not use the AJP connector in its standard deployment configuration. If you're not integrating the iDash Tomcat into an Apache system, then there is no need for the connector. It is safe to comment out the AJP connector via the server.xml