CAUTION – CGI scripts are used to execute programs external to the Tomcat JVM. If you are using the Java SecurityManager this will bypass your security policy configuration in catalina.policy.
Remove the XML comments from around the CGI servlet and servlet-mapping configuration in$CATALINA_BASE/conf/web.xml.
Only Contexts which are marked as privileged may use the CGI servlet (see the privileged property of the Context element).