I just had a fresh server built with CF10 and all the latest Adobe patches applied:
- Tomcat Version: 7.0.23.0
Not good! Version 7.0.23.0 was released 11/25/2011 -- over 2 years ago!!! No wonder the PCI scan is failing. Adobe, why do you bother with statements like "CF-Tomcat update should be available soon after Tomcat comes out with any critical fix" in your marketing material?
Mike, why did you start this thread? I was perfectly happy in my ignorant bliss.