The host is installed with Apache Tomcat 8.5.0 through 8.5.52, 9.0.0-M1 through 9.0.67, 10.0.0-M1 through 10.0.26 or 10.1.0-M1 through 10.1.0 and is prone to an improper input validation vulnerability. A flaw is present in application, which fails to properly handle issues in setting rejectIllegalHeader to false. Successful exploitation could allow attackers to send an invalid Content-Length header making a request smuggling attack.