Introduction
This document describes how to check the version of different Cisco Security Manager (CSM) components.
Background Information
Cisco Security Manager (CSM) requires few server side components, namely Apache WebServer, Tomcat Servlet Engine etc.
These server-side components have their own application versions. With every new release of CSM, the Application version might change, therefore at times it's required to cross-check if any looming Security vulnerability or CVE affects the component version OR essentially the Cisco Security Manager version.
How to check Apache, Tomcat and other Third Party application version on Cisco Security Manager?
This can be checked from cmd prompt or Power Shell on Windows Server
Tomcat
java -cp C:\Progra~2\CSCOpx\MDC\tomcat\lib\catalina.jar org.apache.catalina.util.ServerInfo
C:\Users\Administrator>java -cp C:\Progra~2\CSCOpx\MDC\tomcat\lib\catalina.jar org.apache.catalina.util.ServerInfo
Server version: Apache Tomcat/6.0.44
Server built: Aug 10 2015 04:28:32 UTC
Server number: 6.0.44.0
OS Name: Windows NT (unknown)
OS Version: 10.0
Architecture: x86
JVM Version: 1.7.0_121-b31
JVM Vendor: Oracle Corporation
Apache
C:\>Apache.exe -version
Server version: Apache/2.4.23 (Win32)
Server built: Oct 1 2016 11:19:05
JAVA
C:\>java.exe -version
java version "1.7.0_121"
Java(TM) SE Runtime Environment (build 1.7.0_121-b31)
Java HotSpot(TM) Client VM (build 24.121-b31, mixed mode)
OpenSSL
C:\>openssl
WARNING: can't open config file: c:\ciscossl/ssl/openssl.cnf
OpenSSL> version
CiscoSSL 1.0.2j.6.1.140-fips
Note: Above outputs are taken from Cisco Security Manager 4.13 version.
Feedback