When Coldfusion 10 will be updated with a new version of Tomcat, help with PCI compliance?

Hello

McAfee Scan Alert reported that Tomcat version 7.0.23.0 is not compatible pci.

We are on CF10 and just put update to update 12.

We read in another thread that Tomcat is specialized for the CF and that

CF should be updated Tomcat as needed.

The complete Scan alert warning is:

Scan indicates that you are using a vulnerable version of the server web apache tomcat. The version of tomcat deployed to this web server may be outdated and vulnerable to a series of issues (including but not limited to)

-denial of service attacks

-crossing of directories

-by default the admin password

-l' run the code by downloads arbitrary files

-circumvention of access restrictions

-cross-site scripting

-session fixation

-circumvention of CSRF prevention filter

Thanks in advance,

-Mike

Yes, Steve, if your site is running on the integrated server (something that Adobe suggests only to development and never in production), then Tomcat is directly accessible. If CF is running on Apache or IIS, lockout procedures in such place as specified in the guide of lockdown, Tomcat should not be directly accessible.

Tags: ColdFusion

Similar Questions

  • When Lightroom will be updated with camera 8.7 gross?

    Hi people,

    Can someone tell me what LR will be updated with the camera raw 8.7, containing support for new camera Nikon D750?

    Thank you very much for all your comments

    Until that you convert to DNG you will not be able to import the 750 ships in Lightroom.

    As I am a Windows user, I'm not sure what you mean about the R command but use the DNG Converter you must download it from the link and install it.

    Then, you start the converter as a separate application and you will see the following sign:

    • Then select the Images to be converted
    • Select a location to save the images converted (by default at the same location as the images of entry)
    • Rename the images if you want (the default is just to create a file of the same name with the extension DNG)

    Then convert and after conversion, you will be able to import the DNG files in Lightroom 5.6

    So no matter if you have a Camera RAW 8.7 in CS6 as they will open directly from LR to CS6, as you normally would.

    I guess it is a little awkward because you have an extra step to convert the NEF to DNG, but she at least will get you there in the meantime while you wait for the final product of LR.

    Enjoy!

  • What is the probllem when Windows XP will not update. Receive an update failure message.

    What is the dif when Windows XP will not update. Window security KB2619340, KB2656353, KB2585146, KB2631893 and KB2585542 could not be updated. How can I fix the problem.

    What is the dif when Windows XP will not update. Window security KB2619340, KB2656353, KB2585146, KB2631893 and KB2585542 could not be updated. How can I fix the problem.

    Could be one or more of a number of things. Malware is a. You are able to install other updates. What is your current antivirus software? Have you tried to install the updates with the disabled anti-virus?

    Run the automatic fix when you visit the link HERE. Try the updates again.

  • My Iphone will not update with itunes.

    My Iphone will not update with itunes. He hit a certain part and it's downloading but everything freezes, I can't it never ends downlaoding my photos or anthing. Also, my itunes does not connect to the itunes store.

    Original title: program compatibility Application Applications App Apps game games Legacy Crash crashes Hang hangs

    Hello

    Thanks for posting your query in the Microsoft Community Forums.

    The question you posted would be better suited in the ITunes Forums. I would refer you to the ITunes support link and check if it helps.

    ITunes - Support
    http://www.Apple.com/support/iTunes/

    See also: communities of Apple
    https://discussions.Apple.com/index.jspa

    Back to us for any problem related to the Windows operating system. We will be happy to help you. We at Microsoft try to provide our customers the best experience.

  • I loaded windows live mesenger. but when I tried to open my account, I got a dialog box asking me to update to the new version of windows live messenger.

    I loaded windows live mesenger. but when I tried to open my account, I got a dialog box asking me to update to the new version of windows live messenger.

    The Messenger IM application was withdrawn and merged with Skype. Users will be asked to download and install Skype...  If you don't use Messenger, you don't have to download Skype (or install it).  If you have been asked to update your account Skype has been updated to it.

    Your contacts and preferences must be migrated when this happens and you can use your Skype ID or your Live ID account to sign in.
    Some features of Messenger will continue not in Skype.

    For the most frequently asked questions, please read these links

  • I have some pluggins I used in after effect 2014 CC and when I updated to the new version 2015, pluggins commentator does more work because they are not be updated yet, my question is how can I go back to the old version

    I have some pluggins I used in after effect 2014 CC and when I updated to the new version 2015, pluggins commentator does more work because they are not be updated yet, my question is how can I go back to the old version

    cc desktop application allows to install the previous versions.

    Here's how (about 1/3 of the bottom of page), download and install Adobe Creative Cloud apps

  • The lost files after the update to the new version

    I've updated to the new version this morning and when I open the app all my locally (on iPad) pdf files have disappeared. A fair bit of annotation and highlighting the work seems to have down the drain!

    That's happened? Can I get back them?

    I did not remove the old app before update, only made a classic update of the AppStore.

    Hello

    Here is the solution for iOS.

    To view your files and local files

    1. Go to the House.
    2. Press the text label Blue at the center of the top bar.
    3. Select 'Local' (for files that are stored locally on your iPad/iPhone).

    You can also select 'Cloud of Document' (for files stored on the Document, formerly called Acrobat.com cloud) and others.

    Please let us know if it works for you.  Thank you.

  • Camera raw Adobe fails to open Fuji RAF while lightroom succeeded. I have Adobe CC update to the latest version, can someone help?

    Camera raw Adobe fails to open Fuji RAF while lightroom succeeded. I have Adobe CC update to the latest version, can someone help?

    Hi Sandy,

    Please use the link below to update the Plugin Raw camera Version 9.3.1

    Camera Raw installation of Adobe Photoshop CC and CS6 program

    Once that is done, try opening the Raw Images

    If this does not work, please see the list of compatible camera that supports.

    Devices supported by Adobe Camera Raw

    Let us know if that helps.

    Kind regards

    ~ Mohit

  • When it is scheduled to be released the new version of Adobe connect 9.3?

    When it is scheduled to be released the new version of Adobe connect 9.3 (Acrobat Connect Pro 9.3 for clean installation)

    It should be available, visit the Adobe licenses to your license key and download link.

  • Firefox auto-updated Adobe Reader, new versions?

    It seems that in the past Firefox has auto-mis to update the Adobe Acrobat (last update indicated as August 5, 2014). He presents himself as Adobe PDF plugin for Firefox, but it does not show the new version comes out.

    All my plug-ins are appearing as "up-to-date", including the Flash from Adobe, which has been recently updated on 9 September.

    Is it too early for the plug-in to be updated? Any help on this would be very much appreciated.

    If you talk about the Mozilla plugin checker, it has a bad default.
    I must say that is the current version. You can have a more
    a version recently, but until the web page is told, it will tell you to update.

  • window, says iphone cant update requires a newer version of itunes

    I can't update because the window opens indicating needs a newer version of iTunes. IM the last version using 10.6.6 operating system in my mac

    https://www.Apple.com/iPhone-6s/specs/

    The system configuration required

    Apple ID (required for some features)

    Internet access8

    Sync with iTunes on a Mac or a PC requires:

    you need to update OS X if your mac supports that otherwise, you need update on a computer that supports the required iTunes version

    or update the iPhone itself rather than via iTunes on a computer.

  • Failed to start Windows Media Player without updating to a new version

    original title: Windows Media Player does not work.

    When I try to start Windows Media Player, it says I have a newer version installed but I can not find anywhere on my computer.  How update WMP for Vista Ultimate SP2?

    When I try to start Windows Media Player, it says I have a newer version installed but I can not find anywhere on my computer.  How update WMP for Vista Ultimate SP2?

    To manually check for updates: -.

    Click on the Help menu, and then click Find updates.

    To set how often the Player automatically checks updates: -.

    1. Click the arrow below the now playing tab, and then click More Options.

    2. On the drive, under Updates tab, click the interval option that you want.

    To solve the problem: -.

    Go to start - > in the start search box type - > regsvr32 wmp.dll

  • BlackBerry 10 Cant update to the new version, still running 10.0.9.2372

    Hello

    I want to know how can I update my Z10 I buy one unlocked from UK and I use T-Mobile service, I can't update via the Web site, wifi, or blackberry link, when I try a message pops up saying that there are currently no updates.

    I'd appreciate your help, thank you

    Follow the instructions in this link below and take note of the first chip in particular.

  • Update to the new version?

    I've updated my initial request, made smaller and signed. It has been recently approved by Blackberry once again, but the old version is illustrated in appworld. Has anyone successfully updated its application to a new version and see the new version in app World? I don't have the option 'post to sell' even that I did with my original version, I assumed it would be automatically updated or something... Clarity on the issue would be greatly appreciated.

    See you soon.

    Yes, I have.  It can take at least 24 hours to appear in the App World.

  • Impossible to update to a newer version of the DPS using CS6 tools

    When I connect the DPS Folio Builder told him that I need to upgrade to a newer version. The computer has DPS 8.0.0.24 tools. When I look for updates in the application manager are not everything. Update to CC is not possible at this time.

    My current version of ID is 8.0, and my MAC version 10.6.8

    When I try to manually install the updates for the tools DPS I get this error

    Office DPS CS6 32.0.0 tools updated

    Update is not applicable. Error code: U44M2P28


    I don't know what to do, I could not find all the solutions in the forums. Thank you!!

    You need to update to OS X. The minimum version for DPS running on CS6 is 10.7.

Maybe you are looking for

  • ENVY 13 laptop t: pad on laptop ENVY 13 t

    I just got this phone and I can't figure out how to use a digital keyboard. On my laptop since I had to do was press the function key and I would be able to access the numbers on the U, I, O,... >,? keys. This keyboard does not even show the numbers

  • Disorders programs are connected to the internet

    Program steam does not work as error "Steam.exe (main exception): to run steam, you must first connect to the Internet" I can browse the internet cant perfectly just to get some programs who need internet to run

  • BBM blackBerry text messaging Smartphones

    Is it possible to use BBM to send text messages (SMS or other) to a non-Blackberry (for example an iphone user) user?

  • Impression when remote computer hand is asleep

    How can I configure the computer for my remote computers can print when the main computer is asleep?

  • Cannot remove the composer user

    Hi allI have a client with a problem of deletion of the composer in administrator mode domain user.We tried to remove the user of composer, but the following error: There is no pool associated with this user.If anyone has seen this before? Unfortunat