Tomcat allows auto deployment of applications on startup. It is recommended that this capability be disabled. Rationale: This could allow malicious or untested applications to be deployed and should be disabled.
Solution
In the $CATALINA_HOME/conf/server.xml file, change deployOnStartup to false. deployOnStartup='false' Default Value: deployOnStartup is set to true.