The host is installed with Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74, or 8.5.88 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle an issue when a response did not have any HTTP headers set. Successful exploitation allows attackers to use the response headers from the previous request for the current request leading to an information leak.