CVE ID:	CVE-2007-1858
Description:	The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1858 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities http://www.securityfocus.com/archive/1/500396/100/0/threaded 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) http://www.securityfocus.com/archive/1/500412/100/0/threaded 28482 http://www.securityfocus.com/bid/28482 29392 http://secunia.com/advisories/29392 33668 http://secunia.com/advisories/33668 34882 http://osvdb.org/34882 44183 http://secunia.com/advisories/44183 64758 http://www.securityfocus.com/bid/64758 ADV-2007-1729 http://www.vupen.com/english/advisories/2007/1729 ADV-2009-0233 http://www.vupen.com/english/advisories/2009/0233 HPSBMU02744 http://marc.info/?l=bugtraq&m=133114899904925&w=2 SSRT100776 http://marc.info/?l=bugtraq&m=133114899904925&w=2 SUSE-SR:2008:007 http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-5.html http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html tomcat-ssl-security-bypass(34212) https://exchange.xforce.ibmcloud.com/vulnerabilities/34212