Service Detection – Tomcat Manager, From “Info” to “Ouch”

During a penetration test the author discovered Apache Tomcat running on port 8080 where the Tomcat Manager accepted default credentials (username "admin" with a blank password). Access to the manager allowed WAR deployment and command shell access; the finding was labeled as informational by Nessus but effectively represents a critical misconfiguration that can lead to full server compromise.