The host is installed with Apache Tomcat 11.0.0-M1 through 11.0.0-M16, 10.1.0-M1 through 10.1.18, 9.0.0-M1 through 9.0.85, or 8.5.0 through 8.5.98 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to properly handle cleanup. Successful exploitation allows WebSocket clients to keep WebSocket connections open leading to increased resource consumption.