Apache Tomcat versions 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 suffer from an information disclosure vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75211/CVE-2008-4308.txt
Source: https://packetstormsecurity.com/files/75211/Tomcat-Information-Disclosure.html