ok
Please read https://tomcat.apache.org/tomcat-8.5-doc/security-howto.html to find ways to increase security of your tomcat instance.