Struts COP File Documentation

[Gordon Ross]

I see that Cisco have posted a COP patch for the Struts vulnerability, but there's no readme for it. Are there any docs regarding this patch?

Gordon.

[R0g22]

I believe it should just have the patch for the part of code vulnerable and no other changes hence the reason for no readme either.

[Gordon Ross]

Do we need to manually restart Tomcat afterwards, or does the installer do this? And is restarting Tomcat enough?

Gordon.

[Ashish Patel]

Hi is it this one? "COP file to address Struts vulnerability CVE-2018-11776" ciscocm.struts_2_3_35_upgrade_v1.cop.sgn , when hovering over the file in my browser i do see a readme now. thanks ashish