Insecure Ciphers in default SSL configuration of Apache Tomcat (CVE 2007-1858)
Insecure Ciphers in default SSL configuration of Apache Tomcat
Summary
This vulnerability applies to functionality when the system uses Apache Tomcat in certain versions. No Supported TeraStations use Apache Tomcat.
| Vulnerability ID | Vulnerability Overview |
|---|---|
| CVE-2007-1858 | The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts. |
Affected Supported TeraStations
None
| Date | Description |
| 3/16/2022 | Initial release |