After upgrade to UIM 23.4CU8 we are still seeing vulnerabilities

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

The following paths are showing as vulnerable.

: C:\Program Files (x86)\Nimsoft\probes\service\wasp\webapps\uimdataservices.war                                                        Installed version : 2.25.3  Fixed version     : 2.25.4
: C:\Program Files (x86)\Nimsoft\probes\service\wasp\webapps\uimdataservices\WEB-INF\lib\log4j-core-2.25.3.jar         Installed version : 2.25.3  Fixed version     : 2.25.4
: C:\Program Files (x86)\Nimsoft\probes\service\wasp\webapps\webservices_rest.war                                                      Installed version : 2.25.3  Fixed version     : 2.25.4
: C:\Program Files (x86)\Nimsoft\probes\service\wasp\webapps\rest\WEB-INF\lib\log4j-core-2.25.3.jar                             Installed version : 2.25.3  Fixed version     : 2.25.4

 

Environment

UIM 23.4 CU8

Cause

These are optional probes and not automatically installed with the CU upgrade

Resolution

Deploy the probes from your archive and request a new security scan.