CSCwa01545 - Customer reporting vulnerability of CVE-2021-40438 on VCs

[OliverB]

Hello

unfortunately the information about the affected release is contradictory here.
BUG description: Run with X14.0.3 or older version
Known Affected Releases (3): X14.0.3, X12.7.1, X12.7

What about version X14.0, X14.0.1, X14.0.2, X12.6.x? Are these versions affected or not?

[abdul ilyas]

All earlier versions are usually affected too. The advisory is updated, it is fixed in version 14.0.4 and later.

https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-apache-httpd-2-4-49-VWL69sWQ.html