A trivial flaw in Apache Tomcat that allows remote code execution and access to sensitive files is said to be under attack in ...