CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.6. It affects Apache. Its EPSS score suggests a 18.3% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2007-1858
Severity
LOW
CVSS
2.6
EPSS
18.25%
Apache
Original NVD Description
The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.