CVE-2007-1858

Impact:
Moderate
Public Date:
2007-04-19
Bugzilla:
237083: CVE-2007-1858 tomcat anonymous cipher issue

The MITRE CVE dictionary describes this issue as:

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.

Find out more about CVE-2007-1858 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Satellite v 4.1 (RHEL v.4 AS) RHSA-2007:1069 2007-11-26
Red Hat Satellite v 4.2 (RHEL v.3 AS) RHSA-2007:1069 2007-11-26
Red Hat Satellite v 4.0 (RHEL v.4 AS) RHSA-2007:1069 2007-11-26
Red Hat Satellite v 4.2 (RHEL v.4 AS) RHSA-2007:1069 2007-11-26
Red Hat Satellite 5.0 (RHEL v.4 AS) RHSA-2007:1069 2007-11-26
Red Hat Satellite v 4.0 (RHEL v.3 AS) RHSA-2007:1069 2007-11-26
Red Hat Application Server 3AS (tomcat5) RHSA-2007:0340 2007-05-08
Red Hat Application Server v2 4AS (jakarta-commons-modeler) RHSA-2007:0326 2007-05-21
Red Hat Satellite v 4.1 (RHEL v.3 AS) RHSA-2007:1069 2007-11-26

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.