Test Data Manager

We recently found these vulnerabilities in our TDM environment:

• High – 34460 Unsupported Web Server Detection, See link https://www.tenable.com/plugins/nessus/34460,
• Medium - 12085 Apache Tomcat Default Files. See link https://www.tenable.com/plugins/nessus/12085.

Do you know how to solve them?

Thak you in advance.

For the "default files" one, you can simply shut down the portal service and delete the webapps\ROOT directory:

C:\Program Files\CA\CA Test Data Manager Portal\tomcat\webapps\ROOT

I'm looking into the "unsupported webserver" issue further.

The "Unsupported Web Server" notice is likely related to the version of Tomcat being used. This is being reviewed by our dev team further. No ETA for a fix at this time.

I've published the following document regarding the default files:
Vulnerability scanning found Tomcat Default Files - CA Knowledge 

I've also confirmed with development that the version of Tomcat is expected to be upgraded in a future release - this is a big change that has caused some issues which is why the delivery of that change has slipped. While I cannot commit to the release number or time-frame, it seems likely that it will be in the next release (4.7)