cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1404
Views
25
Helpful
5
Replies

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch do?

Noah L
Beginner
Beginner

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?
Does someone have documentation on it as the cisco provided one only contains the installation steps.

1 Accepted Solution

Accepted Solutions

Marcelo Morais
VIP Advisor VIP Advisor
VIP Advisor

Hi @Noah L ,

 please take a look at the following info during the Hot Patch installation:

ise/admin# application install ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar.gz LOCAL
...
Taking backup of file /opt/CSCOcpm/elasticsearch/lib/log4j-core-*.jar
...
Removing the vulnerable class file JndiLookup.class from log4j-core
...

 

Hope this helps !!!

View solution in original post

5 Replies 5

Leo Laohoo
VIP Community Legend VIP Community Legend
VIP Community Legend

@Noah L wrote:

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?
Does someone have documentation on it as the cisco provided one only contains the installation steps.


Release Notes for Log4j2-fix-2.4-3.0

Hi Leo,

 

Thanks for responding. Unfortunately this is the one im referring to "cisco provided one only contains the installation steps".

I would like to know what does the patch actually do on fixing the log4j vulnerability.

Leo Laohoo
VIP Community Legend VIP Community Legend
VIP Community Legend

@Noah L wrote:

I would like to know what does the patch actually do on fixing the log4j vulnerability.


Raise a TAC Case.

Marcelo Morais
VIP Advisor VIP Advisor
VIP Advisor

Hi @Noah L ,

 please take a look at the following info during the Hot Patch installation:

ise/admin# application install ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar.gz LOCAL
...
Taking backup of file /opt/CSCOcpm/elasticsearch/lib/log4j-core-*.jar
...
Removing the vulnerable class file JndiLookup.class from log4j-core
...

 

Hope this helps !!!

Thank you!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers