Apache Tomcat Request Object Recycle Security Bypass Vulnerability

A security issue has been identified in Apache Tomcat, which can be exploited by malicious people to bypass certain security restrictions.  The security issue is caused due to the request object not being recycled before processing the next request when logging certain actions. This can lead to e.g. the remote IP address and HTTP headers being carried forward to the next request and certain policies being bypassed.