Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2007-1858
HistoryMay 10, 2007 - 12:19 a.m.

Design/Logic Flaw

2007-05-1000:19:00
PRIOn knowledge base
www.prio-n.com
8

6.1 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.3%

JSON

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.

References

Related

nessus 8
f5 2
ubuntucve 1
cve 1
tomcat 2
openvas 8
kitploit 1
redhat 2
securityvulns 2
oracle 1
nessus
nessus
openSUSE 10 Security Update : apache2-mod_jk (apache2-mod_jk-5066)
2008-03-26 00:00:00
SSL Anonymous Cipher Suites Supported
2008-03-28 00:00:00
openSUSE 10 Security Update : tomcat55 (tomcat55-5069)
2008-03-28 00:00:00
f5
f5
SOL16948 - Apache Tomcat vulnerability CVE-2007-1858
2015-07-10 00:00:00
K16948 : Apache Tomcat vulnerability CVE-2007-1858
2015-07-10 00:00:00
ubuntucve
ubuntucve
CVE-2007-1858
2007-05-10 00:00:00
cve
cve
CVE-2007-1858
2007-05-10 00:19:00
tomcat
tomcat
Fixed in Apache Tomcat 5.5.17, 5.0.SVN
2006-04-27 00:00:00
Fixed in Apache Tomcat 4.1.32
2005-11-06 00:00:00
openvas
openvas
SLES9: Security update for Tomcat
2009-10-10 00:00:00
SSL/TLS: Report 'Anonymous' Cipher Suites
2017-04-20 00:00:00
SLES10: Security update for Tomcat 5
2009-10-13 00:00:00
kitploit
kitploit
Sitadel - Web Application Security Scanner
2019-01-14 12:13:00
redhat
redhat
(RHSA-2007:1069) Moderate: tomcat security update for Red Hat Network Satellite Server
2007-11-26 00:00:00
(RHSA-2007:0326) Important: tomcat security update
2007-05-21 00:00:00
securityvulns
securityvulns
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
2009-01-28 00:00:00
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
2014-05-05 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00

6.1 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.3%

JSON
Related for PRION:CVE-2007-1858
nessus8f52ubuntucve1cve1tomcat2openvas8kitploit1redhat2securityvulns2oracle1