As of VM 8.4.0.0, the Tomcat application engine running the Serena VM Web Application Server comes preconfigured with an SSL certificate on port 8443. While this port can be used for HTTPS access, the web browsers running the VM I-Net Web Clients will complain about the certificate because it was created for a different URL ("https://localhost") and is self-signed.
The Tomcat application engine used by the Serena VM Web Application Server and Serena Common Tomcat can be used with HTTPS. By default, Tomcat allows the use of weak SSL ciphers on these connectors.
As of VM 8.5.0, adding a servlet containing an umlaut character (ü, ö, ä , etc) in the description generates an invalid web.xml that shows parsing errors in the Tomcat logs and displays vminet.html as an empty page.
Extract "sourcebridge.exe" from the attached sourcebridge.zip file to the "\SBM\ Application Engine \bin\SourceBridge" directory on the SBM server (or to each client machine) and then re-install SourceBridge using this file. Installing via the SBM User Interface will also use this new executable.
To install the Hotfix, do the following: On the SBM server, stop the Application Engine ( AE ) by shutting down the corresponding website in IIS Admin. Go to the directory SBM_Installation_Directory
1.1.4 Security vulnerabilities with Tomcat 5.0 [DEF162503] A number of security vulnerabilities were identified in the Apache Tomcat 5.0.28 application engine that is running the Version Manager Web Application Server used by File Server, VM I-Net, and WebDAV. These issues have been addressed by replacing the application engine with Apache Tomcat release 6.0.20.
