Contents

Introduction

Background Information

How to check Apache, Tomcat and other Third Party application version on Cisco Security Manager?

Tomcat

Apache

JAVA

OpenSSL

Introduction

This document describes how to check the version of different Cisco Security Manager (CSM) components.

Background Information

Cisco Security Manager (CSM) requires few server side components, namely Apache WebServer, Tomcat Servlet Engine etc.

These server-side components have their own application versions. With every new release of CSM, the Application version might change, therefore at times it's required to cross-check if any looming Security vulnerability or CVE affects the component version OR essentially the Cisco Security Manager version.

How to check Apache, Tomcat and other Third Party application version on Cisco Security Manager?

This can be checked from cmd prompt or Power Shell on Windows Server

Tomcat

java -cp C:\Progra~2\CSCOpx\MDC\tomcat\lib\catalina.jar org.apache.catalina.util.ServerInfo

C:\Users\Administrator>java -cp C:\Progra~2\CSCOpx\MDC\tomcat\lib\catalina.jar org.apache.catalina.util.ServerInfo

Server version: Apache Tomcat/6.0.44

Server built: Aug 10 2015 04:28:32 UTC

Server number: 6.0.44.0

OS Name: Windows NT (unknown)

OS Version: 10.0

Architecture: x86

JVM Version: 1.7.0_121-b31

JVM Vendor: Oracle Corporation

Apache

C:\>Apache.exe -version

Server version: Apache/2.4.23 (Win32)

Server built:   Oct  1 2016 11:19:05

JAVA

C:\>java.exe -version

java version "1.7.0_121"

Java(TM) SE Runtime Environment (build 1.7.0_121-b31)

Java HotSpot(TM) Client VM (build 24.121-b31, mixed mode)

OpenSSL

C:\>openssl

WARNING: can't open config file: c:\ciscossl/ssl/openssl.cnf

OpenSSL> version

CiscoSSL 1.0.2j.6.1.140-fips

Note: Above outputs are taken from Cisco Security Manager 4.13 version.