https://userapps.support.sap.com/sap/support/knowledge/en/1478954
1478954 - How to disable http trace in Tomcat 5.x | SAP Knowledge Base Article
The Tomcat application server that is used for Business Objects XIR2 and XI 3.1 allows for HTTP TRACE and TRACK methods, allowing an attacker to gather more...