Researchers have identified new self-replicating malware that infects computers running the Apache Tomcat Web server with a backdoor that can be used to attack other machines. Java. Tomdep, as the backdoor worm has been dubbed, is Java Servlet-based code that gives Apache Tomcat platforms malicious capabilities.

Is Apache Tomcat safe?

Tomcat is a secure server. However, it is even more secure to use Apache Web Server to proxy it. You can use mod_proxy to connect Apache with Tomcat using AJP or HTTP protocol. This is the safest configuration and you can leverage the many plug-in modules available for Apache Http Server.

Is Tomcat A good web server?

On its own however, Tomcat Server isn’t particularly efficient as a traditional HTTP server, so Apache is a much better choice for dynamic websites built solely with a language like PHP. But of course, when it comes to sites based entirely on JSP, Tomcat is the indisputable leader of the gang.