how to check Firepower tomcat version

[LeeJAEKEUN9410]

Hello

Product : Firepower 8350 , FMC 4500

Version : 6.2.3.10

how to check Firepower tomcat version? ex) UI or Cli commed

because CVE-2020-9484, CVE-2020-1938 issue

It be resolved when upgrade version 6.4.0.9?

I hope you can help me

thank you

[Mohammed al Baqari]

Hi,

>From FMC CLI go to *cd /var/opt/CSCOpx/MDC/tomcat/bin*

>From there run the script *./version.sh *

You should see something like this

Using CATALINA_BASE: /var/opt/CSCOpx/MDC/tomcat
Using CATALINA_HOME: /var/opt/CSCOpx/MDC/tomcat
Using CATALINA_TMPDIR: /var/opt/CSCOpx/MDC/tomcat/temp
Using JAVA_HOME: /var/opt/CSCOpx/MDC/vms/jre
Using CLASSPATH:
/var/opt/CSCOpx/MDC/tomcat/vms/athena/WEB-INF/lib/jconn.jar:/var/opt/CSCOpx/MDC/tomcat/bin/tomcat-juli.jar:/var/opt/CSCOpx/MDC/tomcat/bin/bootstrap.jar
Using JAVA_OPTS: -server -Xms512m -Xmx3072m
-XX:+HeapDumpOnOutOfMemoryError -XX:+UseCompressedOops -XX:+UseG1GC
-XX:+UseStringDeduplication
-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false
-Djava.awt.headless=true -Dlog4j.ignoreTCL=true
-Dorg.omg.CORBA.ORBClass=org.jacorb.orb.ORB
-Dorg.omg.CORBA.ORBSingletonClass=org.jacorb.orb.ORBSingleton
-Djdbcdriver=jconn4
-Dorg.apache.jasper.compiler.Generator.STRICT_GET_PROPERTY=false
-Djava.security.auth.login.config=/var/opt/CSCOpx/MDC/tomcat/conf/jaas.config
-Dorg.terracotta.quartz.skipUpdateCheck=true
-Dnet.sf.ehcache.skipUpdateCheck=true -DNMSROOT=/var/opt/CSCOpx
-Duse.shiro=true -Dglodom.as.default=true -Dglodom.monitor=true#6
-Dtrack.session.lifecycle=true -Dtrack.session.lifecycle.level=11111
-Djava.library.path=/var/opt/CSCOpx/MDC/tomcat/bin/ -Dfile.encoding=UTF-8
-Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.NoOpLog

*Server version: Apache Tomcat/8.0.47*Server built: Sep 29 2017 13:46:41
UTC
Server number: 8.0.47.0
OS Name: Linux
OS Version: 4.14.158sf.westmere-secure-1
Architecture: amd64
JVM Version: 1.8.0_202-b08
JVM Vendor: Oracle Corporation

**** Please remember to rate useful posts

[Mohammed al Baqari]

Hi,

>From FMC CLI go to *cd /var/opt/CSCOpx/MDC/tomcat/bin*

>From there run the script *./version.sh *

You should see something like this

Using CATALINA_BASE: /var/opt/CSCOpx/MDC/tomcat
Using CATALINA_HOME: /var/opt/CSCOpx/MDC/tomcat
Using CATALINA_TMPDIR: /var/opt/CSCOpx/MDC/tomcat/temp
Using JAVA_HOME: /var/opt/CSCOpx/MDC/vms/jre
Using CLASSPATH:
/var/opt/CSCOpx/MDC/tomcat/vms/athena/WEB-INF/lib/jconn.jar:/var/opt/CSCOpx/MDC/tomcat/bin/tomcat-juli.jar:/var/opt/CSCOpx/MDC/tomcat/bin/bootstrap.jar
Using JAVA_OPTS: -server -Xms512m -Xmx3072m
-XX:+HeapDumpOnOutOfMemoryError -XX:+UseCompressedOops -XX:+UseG1GC
-XX:+UseStringDeduplication
-Dorg.apache.jasper.compiler.Parser.STRICT_QUOTE_ESCAPING=false
-Djava.awt.headless=true -Dlog4j.ignoreTCL=true
-Dorg.omg.CORBA.ORBClass=org.jacorb.orb.ORB
-Dorg.omg.CORBA.ORBSingletonClass=org.jacorb.orb.ORBSingleton
-Djdbcdriver=jconn4
-Dorg.apache.jasper.compiler.Generator.STRICT_GET_PROPERTY=false
-Djava.security.auth.login.config=/var/opt/CSCOpx/MDC/tomcat/conf/jaas.config
-Dorg.terracotta.quartz.skipUpdateCheck=true
-Dnet.sf.ehcache.skipUpdateCheck=true -DNMSROOT=/var/opt/CSCOpx
-Duse.shiro=true -Dglodom.as.default=true -Dglodom.monitor=true#6
-Dtrack.session.lifecycle=true -Dtrack.session.lifecycle.level=11111
-Djava.library.path=/var/opt/CSCOpx/MDC/tomcat/bin/ -Dfile.encoding=UTF-8
-Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.NoOpLog

*Server version: Apache Tomcat/8.0.47*Server built: Sep 29 2017 13:46:41
UTC
Server number: 8.0.47.0
OS Name: Linux
OS Version: 4.14.158sf.westmere-secure-1
Architecture: amd64
JVM Version: 1.8.0_202-b08
JVM Vendor: Oracle Corporation

**** Please remember to rate useful posts

[Marvin Rhoads]

Good info @Mohammed al Baqari thanks for sharing.

FYI FMC 6.7 has moved off of Oracle Java and onto Azul (https://www.azul.com/):

<snip>
Server version: Apache Tomcat/9.0.30
Server built:   Dec 7 2019 16:42:04 UTC
Server number:  9.0.30.0
OS Name:        Linux
OS Version:     4.14.171sf.westmere-secure-5
Architecture:   amd64
JVM Version:    11.0.6+10-LTS
JVM Vendor:     Azul Systems, Inc.

[LeeJAEKEUN9410]

Thank you for helping. Have a nice day!!!