What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch do?

[Noah L]

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?
Does someone have documentation on it as the cisco provided one only contains the installation steps.

[Leo Laohoo]

---

@Noah L wrote:

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?
Does someone have documentation on it as the cisco provided one only contains the installation steps.

---

Release Notes for Log4j2-fix-2.4-3.0

[Noah L]

Hi Leo,

Thanks for responding. Unfortunately this is the one im referring to "cisco provided one only contains the installation steps".

I would like to know what does the patch actually do on fixing the log4j vulnerability.

[Leo Laohoo]

---

@Noah L wrote:

I would like to know what does the patch actually do on fixing the log4j vulnerability.

---

Raise a TAC Case.

[Marcelo Morais · Accepted solution]

Hi @Noah L ,

 please take a look at the following info during the Hot Patch installation:

ise/admin# application install ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar.gz LOCAL
...
Taking backup of file /opt/CSCOcpm/elasticsearch/lib/log4j-core-*.jar
...
Removing the vulnerable class file JndiLookup.class from log4j-core
...

Hope this helps !!!

[Noah L]

Thank you!