This document covers security related changes to MagicINFO Server.
Apache Tomcat®
- MagicINFO Server v4005 or earlier: Tomcat v7.0.65
- MagicINFO Server v4100 or higher: Tomcat v8.0.43
Java Runtime Environment
- MagicINFO Server v4005 or earlier: JRE 7 (Update 13)
JRE that comes along with MagicINFO Server installation package is automatically installed if JRE is not installed.
If JRE is already installed, the installed JRE is used. - MagicINFO Server v4100 ~ v6002: JRE 8 (Update 131)
JRE that comes along with MagicINFO Server installation package is automatically installed if JRE is not installed.
If JRE is already installed, the installed JRE is used. - MagicINFO Server v7000 or higher: JRE 8 (Update 222)
The built-in JRE that comes along with the MagicINFO Server installation package is used irrespective of whether the server has a preinstalled JRE or not.
Zulu is used from v7000.
Zulu is an OpenJDK provided free of charge by Azul Systems, an American JVM manufacturing vendor.
Security Protocol
- MagicINFO Server v4000 or earlier : TLS 1.0/1.1/1.2/1.3
- MagicINFO Server v4100 or higher : TLS 1.0/1.1/1.2
Certificate
- Self-signed certificate