Vulnerability related with Apache-tomcat-9.0.89 on all Jasper server

Products

• Clarity PPM On Premise

Issue/Introduction

We have received Vulnerability related with Apache tomcat for all jasper server.

1) Could you please confirm if new Apache version is compatible?

2) Could you please share the step require to perform this remediation from our end. We don't find any KB article. 

Resolution

You can download Tomcat 9.0.109 and deploy your JasperServer into it. JasperServer 9 is compatible with Tomcat 9 in general including the newest minor versions.

How to Upgrade Tomcat for Jaspersoft (Clarity PPM)

https://knowledge.broadcom.com/external/article/221505/how-to-upgrade-tomcat-for-jaspersoft-cla.html

Note: Please test the upgrade in a lower environment first before proceeding with the upgrade in the Production environment.