...
You can fix the breach by installing the versions Apache Tomcat version 7.0.100 , 8.5.51 or 9.0.31.
If you do not use the AJP Connector
Step 1:
Find the file server.xml in CATALINA_Base/conf and edit the line:
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
Step 2:
Commend the line out or delete it:
<!--<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />-->
Step 3:
Save the edit, and then restart Tomcat.
In addition to the above measures, of course, you can also use firewalls to prevent untrusted sources from accessing the Tomcat AJP Connector service port.