Cisco Prime saying is on version 3.10.2 instead 3.10.4 Update02 ?

[Sorin Dimitriu]

Hi!

We did the last patch of the prime to 3.10.4 Update02 and it shows that is on version 3.10.2.

On 3.10.4 update01 it showed the right version, but when we did the upgrade to version 3.10.4 update02 he changed to 3.10.2.

It is a cosmetic bug? Anyone can help?

(We did the upgrade to the update02 because of CVE-2023-44487 vulnerability)

Patches:

alvacip01/admin# show version

Cisco Application Deployment Engine OS Release: 4.1

ADE-OS Build Version: 4.1.0.001

ADE-OS System Architecture: x86_64

Copyright (c) 2009-2022 by Cisco Systems, Inc.

All rights reserved.

Hostname: alvacip01

Version information of installed applications

---------------------------------------------

Cisco Prime Infrastructure

********************************************************

Version : 3.10.2 [FIPS not Enabled]

Build : 3.10.0.1050.90

Installed Patches: PI 3.10.2 Maintenance Release

Critical Fixes:

        PI 3.10.4 Maintenance Release ( 2.0.0 )

        PI 3.10.2 System Patch ( 1.0.5 )

        PI 3.10.4 System Patch ( 1.0.0 )

        PI 3.10.4 Update 02 System Patch ( 1.0.0 )

        PI 3.10.4 Update 02 & Prime Data Migration Tool Update 05.01 ( 2.0.0 )

[balaji.bandi]

May be minor cosmetic bug - in the end it show the fix applied :

PI 3.10.4 Update 02 & Prime Data Migration Tool Update 05.01 ( 2.0.0 )

[Sorin Dimitriu]

Hi!

Thank you for your answer.

But with the update02 applied, the cybersecutiry team are still receiving the vulnerability notifications...

The correction applied is not having an effect.

[Sorin Dimitriu · Accepted solution]

Hi!

Follow the solution of this post:

Prime Infra GUI will be displaying only the major upgrade versions in the front dashboard and the minor patches can only be seen in “View Installed Updates”.

Version 3.10.2 - Major version

Version 3.10.4 - Minor version

This is an expected behavior & works as per design. As validated prime runs on version 3.10.4 Update02.

Cisco Prime Infrastructure
********************************************************
Version : 3.10.2 [FIPS not Enabled]
Build : 3.10.0.1050.90
Installed Patches: PI 3.10.2 Maintenance Release
Critical Fixes:
PI 3.10.4 Maintenance Release ( 2.0.0 )
PI 3.10.2 System Patch ( 1.0.5 )
PI 3.10.4 System Patch ( 1.0.0 )
PI 3.10.4 Update 02 System Patch ( 1.0.0 )
PI 3.10.4 Update 02 & Prime Data Migration Tool Update 05.01 ( 2.0.0 )

As checked mentioned vulnerabilities(CVE-2023-44487) are due to apache version lesser than 2.4.58. In the latest version of prime 3.10.4 Update 02, apache module has been upgraded to 2.4.58.

Below is the reference from CLI:

[root@lokeshpi310 bin]# ./httpd -v

Server version: Apache/2.4.58 (Unix)

Server built:   Oct 25 2023 14:29:13

Soon will be available a new major version (3.10.5).

Hope that help everyone that as the same doubts.