CSCwa47133 - ISE Evaluation log4j CVE-2021-44228

[misterpm]

Is Identity Services Engine Passive Identity Connector (ISE-PIC) version 2.7.0.356 affected by the vulnerability log4j CVE-2021-44228?

It was not sated on Cisco's Security Advisory page, and I see no patch when looking at the ISE-PIC software page.

[Leo Laohoo · Accepted solution]

ISE 2.4, 2.6, 2.7 or 3.0 hot patch can be found HERE.  

Release Notes (for the patch) can be found HERE.

NOTE: 

• Patch only apply to ISE 2.4, 2.6, 2.7 or 3.0.
• Applying this patch will restart the service.