Questions tagged [vulnerability-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
26 views

automate Checking vulnerabilities on Windows

i'm working on a project (vulnerabilty manager) where i have to find vulnerabilities on different OS's, for linux it's simple i have to check installed packages and match them with CVE list, but what ...
0
votes
3answers
50 views

Vulnerability management benchmarks

Despite the continuous effort in our company to resolve vulnerabilities, we are still reporting a significant number of vulnerabilities after each scan we perform. We would like to understand if ...
0
votes
0answers
31 views

Secure MPLS configuration: Does TCP port 646 (LDP) need to be generally exposed?

I am looking for expertise on MPLS configurations and security. A recent scan of my organization's public IPv4 perimeter networks using Rapid7 InsightVM has discovered a system which appears to be ...
2
votes
3answers
100 views

How to make sure vulnerability management does not lead to reduced or compromised security

When running vulnerability scans, often a particular version of, say, Node.js is reported to be vulnerable along with a recommendation to update to a higher version. Then we also have insecure SSL/...
3
votes
1answer
105 views

How to fairly pay out bug bounties without going over budget?

I work for a small company and for our webapp, we want to offer bug bounties for vulnerabilities reported with monetary rewards based on criticality. Problem is we only have a limited overall budget ...
0
votes
0answers
25 views

Is the vulnerability described in rfc6749 10.16 for implicit Flow is comparable to “man in the middle”?

I'm trying to understand if the vulnerability described in the specification for implicit flow : link is the same principle of a man in the middle attack. From what I understood, the malicious client ...
1
vote
0answers
21 views

Version earlier than 0 in Debian OVAL feeds

I'm trying to parse Debian OVAL feeds to establish if some packages are vulnerable or not. I'm using criterions to establish what's the vulnerable version for a package, however often there are ...
0
votes
2answers
93 views

How Vulnerability scanners assign CVE codes to Vulnerability found

I just want to know how CVE codes are assigned by the vulnerability scanners, while it found the particular vulnerability.
0
votes
0answers
60 views

How to check security and other updates avaliable on linux distro automaticaly?

Let suppose we have network of 10 plus Linux machines having different distro (debian, Centos , Redhat and Arch etc ). Can we implement some centralized system where we have update about update on ...
2
votes
1answer
72 views

Best practices for vulnerability patching periods?

I was wondering if there are any general recommendations on maximum resolution times for vulnerabilities. Consider a vulnerability/patch management process where a ticket is opened when a ...
0
votes
1answer
48 views

What is the difference when scanning external IP's from my LAN vs cloud/external scanner?

Im concerned if I am scanning effectively. When I scan our external IP's with the scanner on my laptop the packets are leaving my network through my firewall and routing across the internet to hit ...
0
votes
0answers
100 views

Determining clients connecting to IIS using CBC ciphers. (preparing for Lucky13 remediation)

I am trying to determine the impact of re-mediating a lucky 13 vulnerability; which i understand requires disabling CBC cipher modes. So far i have added custom logging to my IIS instance to capture ...
0
votes
0answers
72 views

Can I get hold of malicious npm packages?

the npm advisories site lists quite a lot of malicious packages which - in my understanding - are not packages with vulnerabilities but malicious per se. These packages were removed from the npm repo ...
-1
votes
1answer
298 views

Which database is used by npm-audit

you probably know the npm-audit tool which informs you about vulns in your node.js projects dependencies. I'd like to know what database npm-audit is using and how I get access to this data. Thank ...
2
votes
2answers
149 views

How do I get the “vulnerabilities history” of a Node.js package?

When installing a Node.js package via npm or when running npm-audit I get information about known vulnerabilities of packages in the project. From my understanding this means that there must be some ...
1
vote
0answers
37 views

Vulnerabilities arising from Interations between application and environment

Suppose I have a 'secure' environment - a few servers running operating systems hardened according to best practice, likewise for network devices, user accounts with minimal permissions and a good ...
1
vote
0answers
48 views

Is there away to retrieve results (including found vulnerabilities) of a specific scan from one API call? [closed]

Is there away to retrieve results (including found vulnerabilities) of a specific scan from one API call? From InsightVm documentation, the GET scan API call returns only scan info with statistics of ...
1
vote
1answer
59 views

Common practice when CVSS v2 score over represents severity

We're formalizing our vulnerability management process and decided to use CVSS V2 to help decide what vulnerabilities to remediate. We're running into a situation where a vulnerability's severity ...
0
votes
1answer
123 views

Can a CVE be removed from NVD database?

Normally, CVEs are added to the NVD CVE database and never removed. But can a CVE ID just disappear from the database after being there for a while? (Maybe because the entry was a complete mistake, or ...
0
votes
0answers
166 views

Can OpenVAS do a scan on a scanner device?

I know OpenVAS can scan printers with just tweaking some scan configuration. I try to scan a scanner device but I only get one result which is OS Detection Consolidation and Reporting. I have an ...
1
vote
0answers
46 views

UDF Client, Socket Binding and Tags Hack - Need Help [closed]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
1
vote
3answers
247 views

Vulnerability management and assessment tracking solutions

How does your company track the vulnerability management information that happens between receiving a vulnerability scan report and remediating a vulnerability? Given the following example: Scan A ...
1
vote
1answer
160 views

Exploit database for NVD vulnerabilities [closed]

I have the list of vulnerabilities (CVEs) in the NVD database. I need to find which one has an exploit. Is there any database available to get the list of all the exploits for CVEs? or is there any ...
0
votes
1answer
108 views

Server vulnerability scanning [closed]

How can I discover server vulnerabilities without using a scanning software such as openVas? is there any manual ways or steps to follow to assure server security. Thanks in advance
3
votes
2answers
109 views

What qualifies a vulnerability that shall be published?

Consider an open source project that is under continuous development. During development, in your day-to-day work you do occasionally find some issues on your own. There are also users of your library ...
2
votes
1answer
644 views

Could you use svchost to run any service?

Is it possible if per say you installed an "evil_service," to use svchost to run it? Will it run any service?
1
vote
0answers
153 views

Windows Possible Vectors for Privilege Escalation From “Weak” Folder ACLs

I am doing a security analysis and I am trying to figure out what the possible attack vectors and possibility of privilege escalation's are of the way this program is setup? I used Attack Surface ...
2
votes
1answer
761 views

JBoss Web vulnerabilities [duplicate]

In my organization I found servers running JBoss Web/7.0.13.Final and JBoss Web/7.0.12.Final. I could not find security vulnerabilities for this server's versions, but they seem old to me. How can I ...
1
vote
0answers
414 views

CVSS Alternatives? [closed]

I am looking for suggestions of alternatives to vulnerability scoring systems such as CVSS & DREAD. I have found that DREAD is too subjective to work and CVSS was ranking everything too highly ...
4
votes
3answers
224 views

I want to hire someone on Upwork to install a bitcoin trading bot on a cloud server. What vulnerabilities should I watch out for?

Context I tried installing Tribeca (a bitcoin trading bot) myself yesterday, but messed it up somehow, as I'm not very familiar with Docker/Git/NPM/mongoDB technologies (a little knowledge is ...
3
votes
1answer
419 views

Adobe Flash and Meltdown / Spectre

Many browsers have received updates to protect against the Meltdown and Spectre attacks. I presume these patches relate (solely) to JavaScript execution within the browser. Java in the browser is as ...
1
vote
2answers
504 views

How can I change windows security settings using python? i.e. Password Requirements / Require Ctrl - Alt - Delete to log in

I am writing code in Python 2 or 3 to script Cybersecurity functions. Functions such as Lockout Duration, Password Length, and other things that involve a lot of clicking that could easily be ...
1
vote
0answers
36 views

Is using AWS and administered VMs a reasonable and feasible secure environment?

I'm currently tasked with exploring options for hosting secure data for our company that don't require setting up any in-house infrastructure as we don't currently have any. Everyone is a developer ...
0
votes
3answers
93 views

Is it recommended to patch announced vulnerability for unused services or features?

Sometimes vendors announce software upgrade to patch some discovered vulnerability in some feature or service which is not enabled in your system. Is it recommended to upgrade your software although ...
3
votes
2answers
384 views

How do I secure my home Wi-Fi network in light of KRACK? [duplicate]

Now that KRACK has been discovered to exploit WPA2, is it still possible to secure my home Wi-Fi network? If so, what steps should I take to secure it against KRACK attacks? Will there now be a need ...
1
vote
1answer
334 views

How to acquire security advisory for CentOS?

I've been seeing security advisory number like CESA-2017:1842, and after search I could only find some of them in mailing list archives such as this. Is there a website like https://usn.ubuntu.com or ...
0
votes
1answer
93 views

Are CVE identifiers assigned for proprietary software packages? [duplicate]

If I find a vulnerability while using a proprietary software package can I request a CVE identifier. Or rather vulnerabilities in proprietary software packages are a matter of me reporting issue to ...
5
votes
2answers
413 views

Why are the CVSS scores differ so much between Redhat and NVD page?

take CVE-2016-7872 for example. in National Vulnerability Database webpage, we can see that the cvss2 and cvss3 score are 9.8 and 10.0 respectively. but in the redhat security advisory page, they ...
25
votes
4answers
4k views

Should a vulnerability in a service that is present on the device, but not running and not used at all, be mentioned in the vulnerability report?

Say, I have scanned our Cisco Router, and it returned 20 vulnerabilities back. However, most of them are tied to specific services that this router is not running, for example CVE-2016-6380 - we are ...
1
vote
3answers
3k views

What is the difference between patch management and vulnerability management?

I've been thinking about this lately. are they the same thing? or is the latter has a lot more than just management of patches?
3
votes
1answer
311 views

What does a “-” mean in the Version field in Common Product Enumeration (CPE)?

I'm trying to understand the Common Product Enumeration standard published by Mitre. In the Version field, I've found references to "*" or ANY meaning "Any Version." However, when I search the CPE ...
3
votes
0answers
47 views

Are there any development tools that help with both asset management and vulnerability management? [closed]

I work for a software/system development company and I'm looking to improve how we manage information security within our development process. Much of what I have found in my initial research is ...
-1
votes
1answer
91 views

Can browser emulation create vulnerabilities?

If a browser is not authorized on a network, can browser emulation within an authorized browser create vulnerabilities? For instance, Chrome is unauthorized but if I run IE, press F12 to get into ...
4
votes
2answers
305 views

What to do if you think you discovered a zero day vulnerability? (white hat style) [duplicate]

Does anybody discovered a zero day vulnerability? I know some black hat hackers sell that kind of info on deep web. But if you are a white hat... Which steps to perform? How to assure a CVE is ...
9
votes
2answers
241 views

Are there any Common Weakness Entries (CWEs) applicable for hardware security weaknesses?

I can't seem to find a suitable CWE for classifying hardware-specific security weaknesses. Particularly, I'm looking for a CWE that applies to power glitching or clock glitching against a ...
3
votes
0answers
4k views

CVE vs KB Table [closed]

I work with equipment that is very selective about which KB or MS patches are allowed to be installed. I'm spending a lot of time trying to figure out which CVEs are addressed by which KB or MS fix ...
5
votes
2answers
1k views

WD My Cloud Vulnerabilities - What is at risk?

Recently there were around 70 vulnerabilities found within Western Digital's "My Cloud" devices. I am curious to know more about the scope of these vulnerabilities. All of the vulnerabilities have ...
2
votes
2answers
79 views

how are flaws in google chrome usually patched and disclosed

When there is a vulnerability like Flash's in any piece of software such as Chrome, is it disclosed immediately to the general public, or is it kept a secret until it is patched? If the former, are ...
1
vote
1answer
257 views

Interpreting CVE ratings: Buffer Overflow vs. Denial of Service vs. Remote Code Executing (RCE)

If a CVE lists a buffer overflow vulnerability, but not a remote code execution, should I interpret that as: This vulnerability has not been confirmed to expose RCE, or This vulnerability has been ...
1
vote
2answers
79 views

What app owners need to do while they resolve XSS to minimize risk?

I have submitted a pentest report in which I have reported XSS at a few locations in an application. The management agreed to the risk. They have planned to remediate the issue in the next thirty days....