> I find the timing of this article to be very weird. As Juraci said, > this was something that was patched more than 6 years ago. > You'd be amazed (and horrified) at how many old JBoss and Tomcat deployments are out there...