tomcat listens on 0.0.0.0 by default
After an installation, tomcat is listening on 0.0.0.0 for the following ports defined in server.xml:
The only service connecting to tomcat is katello, which runs on localhost. It would be better if tomcat was restricted to binding to 127.0.0.1. This is changed via server.xml.