CSCwa50116 - evaulate elasticsearch on apic for log4j vulnerability

[Network_Sarovani]

Does this impact the APIC version 4.2(7I)

[balaji.bandi]

check here :

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd#vp

you may need to uplift to

4.2(7r) (Available)
5.2(3g) (Available)

[Network_Sarovani]

In the below link it says for version 5.x and above ?

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa47295?rfs=iqvred 

Symptom: This bug has been filed to evaluate the Cisco Network Insights Base Application - NIB (its Nexus Insights Cloud Connector App on 5.x version onwards) for Cisco APIC against the vulnerability in the Apache Log4j Java library disclosed on December 9th, 2021

[balaji.bandi]

4.2(7r) (Available)
5.2(3g) (Available)

as mentioned above, its all depends on your requirement, just patch available for short term, if you can able to upgrade to your environment, you welcome to do so. choice is yours. both are cisco links and valid.

[Network_Sarovani]

thank you