Questions tagged [vulnerability-management]
The vulnerability-management tag has no usage guidance.
68
questions
1
vote
1
answer
129
views
Vulnerabilities in Build-time Libraries Could be a Security Threat
If a dependency that is used in development environment or at build time has a security vulnerability, could it cause a security threat for the application? I'm looking for an example to understand ...
- 111
1
vote
1
answer
58
views
Vulnerability: Standalone Library vs. Same Code Elsewhere
Are libraries inherently more vulnerable than in-house application code?
The speaker of this talk generally advises folks against creating wrapper libraries for Erlang in Elixir rather than just ...
- 192
1
vote
1
answer
150
views
Is there a way to check if vulnerability introduced by npm package is reachable/exploitable
I have a problem where I have too many vulnerabilities on a few hundred repositories introduced with outdated npm packages. The issue is that I need to find a way to prioritize this. The biggest pain ...
- 11
1
vote
1
answer
99
views
Security for a Windows application running in a corporate network
I know security is pretty important for the web application, but what about windows applications running in a corporate environment, network, not accessible from outside.
Do we need to treat security ...
- 111
0
votes
3
answers
302
views
How to manage my vulnerability scan reports efficiently
My company uses multiple tools for vulnerability scanning. We have Nessus Pro for network scanning, White Source Bolt and GitHub Dependabot for dependencies, and SonarQube for source code, and Burp ...
- 29
1
vote
2
answers
655
views
Manually Validating Vulnerabilities from a Vulnerability Scan
How do you manually validate vulnerabilities from a vulnerability scan or a vulnerability release from a vendor?
Say you received a report with a high vulnerability. The vulnerability scanner used a ...
1
vote
1
answer
601
views
What is difference & link between threat modelling and vulnerability assessment?
My understanding is that, threat modelling is used at the design stage to identify the possible threats, prioritize them and help in identifying security requirements/security controls. Vulnerability ...
- 191
2
votes
1
answer
272
views
vulnerability management 101
Looking at a typical vulnerability scan report from Nessus or Qualys most people are terrified, lost, and basically with more questions than answers. For example, how on earth am I going to deal with ...
- 1,558
39
votes
4
answers
7k
views
How do open-source projects prevent disclosing a bug while fixing it?
I understand that many open-source projects request vulnerabilities not to be disclosed on their public bug tracker but rather by privately contacting the project's security team, to prevent ...
- 3,006
0
votes
0
answers
90
views
Chrome Vulnerabilities are detected in vulnerability scan even after upgraded with latest versions [duplicate]
Had few chrome vulnerabilities [CVE-2020-6420] detected by BI(Retina). Upgraded the affected machines to chrome version 84.0.4147.89. After re-scan still the same vulnerabilities are detected.
Anyone ...
- 1
0
votes
3
answers
244
views
Vulnerability management benchmarks
Despite the continuous effort in our company to resolve vulnerabilities, we are still reporting a significant number of vulnerabilities after each scan we perform.
We would like to understand if ...
- 1
2
votes
3
answers
168
views
How to make sure vulnerability management does not lead to reduced or compromised security
When running vulnerability scans, often a particular version of, say, Node.js is reported to be vulnerable along with a recommendation to update to a higher version. Then we also have insecure SSL/...
- 79
3
votes
1
answer
226
views
How to fairly pay out bug bounties without going over budget?
I work for a small company and for our webapp, we want to offer bug bounties for vulnerabilities reported with monetary rewards based on criticality.
Problem is we only have a limited overall budget ...
- 53
3
votes
0
answers
108
views
Version earlier than 0 in Debian OVAL feeds
I'm trying to parse Debian OVAL feeds to establish if some packages are vulnerable or not. I'm using criterions to establish what's the vulnerable version for a package, however often there are ...
0
votes
2
answers
161
views
How Vulnerability scanners assign CVE codes to Vulnerability found
I just want to know how CVE codes are assigned by the vulnerability scanners, while it found the particular vulnerability.
0
votes
0
answers
109
views
How to check security and other updates avaliable on linux distro automaticaly?
Let suppose we have network of 10 plus Linux machines having different distro (debian, Centos , Redhat and Arch etc ).
Can we implement some centralized system where we have update about update on ...
- 111
2
votes
1
answer
304
views
Best practices for vulnerability patching periods?
I was wondering if there are any general recommendations on maximum resolution times for vulnerabilities.
Consider a vulnerability/patch management process where a ticket is opened when a ...
- 367
0
votes
1
answer
100
views
What is the difference when scanning external IP's from my LAN vs cloud/external scanner?
Im concerned if I am scanning effectively.
When I scan our external IP's with the scanner on my laptop the packets are leaving my network through my firewall and routing across the internet to hit ...
- 197
0
votes
0
answers
489
views
Determining clients connecting to IIS using CBC ciphers. (preparing for Lucky13 remediation)
I am trying to determine the impact of re-mediating a lucky 13 vulnerability; which i understand requires disabling CBC cipher modes.
So far i have added custom logging to my IIS instance to capture ...
- 1
0
votes
0
answers
139
views
Can I get hold of malicious npm packages?
the npm advisories site lists quite a lot of malicious packages which - in my understanding - are not packages with vulnerabilities but malicious per se. These packages were removed from the npm repo ...
- 161
-1
votes
2
answers
2k
views
Which database is used by npm-audit
you probably know the npm-audit tool which informs you about vulns in your node.js projects dependencies. I'd like to know what database npm-audit is using and how I get access to this data.
Thank ...
- 161
3
votes
2
answers
473
views
How do I get the "vulnerabilities history" of a Node.js package?
When installing a Node.js package via npm or when running npm-audit I get information about known vulnerabilities of packages in the project. From my understanding this means that there must be some ...
- 161
1
vote
0
answers
76
views
Vulnerabilities arising from Interations between application and environment
Suppose I have a 'secure' environment - a few servers running operating systems hardened according to best practice, likewise for network devices, user accounts with minimal permissions and a good ...
- 111
1
vote
0
answers
117
views
Is there away to retrieve results (including found vulnerabilities) of a specific scan from one API call? [closed]
Is there away to retrieve results (including found vulnerabilities) of a specific scan from one API call?
From InsightVm documentation, the GET scan API call returns only scan info with statistics of ...
- 11
1
vote
1
answer
118
views
Common practice when CVSS v2 score over represents severity
We're formalizing our vulnerability management process and decided to use CVSS V2 to help decide what vulnerabilities to remediate. We're running into a situation where a vulnerability's severity ...
- 23
0
votes
1
answer
257
views
Can a CVE be removed from NVD database?
Normally, CVEs are added to the NVD CVE database and never removed. But can a CVE ID just disappear from the database after being there for a while? (Maybe because the entry was a complete mistake, or ...
0
votes
0
answers
265
views
Can OpenVAS do a scan on a scanner device?
I know OpenVAS can scan printers with just tweaking some scan configuration.
I try to scan a scanner device but I only get one result which is OS Detection Consolidation and Reporting.
I have an ...
- 13
1
vote
0
answers
95
views
UDF Client, Socket Binding and Tags Hack - Need Help [closed]
Background
For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
- 19
1
vote
3
answers
728
views
Vulnerability management and assessment tracking solutions
How does your company track the vulnerability management information that happens between receiving a vulnerability scan report and remediating a vulnerability?
Given the following example:
Scan A ...
- 23
1
vote
1
answer
289
views
Exploit database for NVD vulnerabilities [closed]
I have the list of vulnerabilities (CVEs) in the NVD database. I need to find which one has an exploit. Is there any database available to get the list of all the exploits for CVEs? or is there any ...
- 31
0
votes
1
answer
163
views
Server vulnerability scanning [closed]
How can I discover server vulnerabilities without using a scanning software such as openVas? is there any manual ways or steps to follow to assure server security.
Thanks in advance
user181612
3
votes
2
answers
158
views
What qualifies a vulnerability that shall be published?
Consider an open source project that is under continuous development. During development, in your day-to-day work you do occasionally find some issues on your own. There are also users of your library ...
- 468
2
votes
1
answer
1k
views
Could you use svchost to run any service?
Is it possible if per say you installed an "evil_service," to use svchost to run it? Will it run any service?
- 91
1
vote
0
answers
213
views
Windows Possible Vectors for Privilege Escalation From "Weak" Folder ACLs
I am doing a security analysis and I am trying to figure out what the possible attack vectors and possibility of privilege escalation's are of the way this program is setup?
I used Attack Surface ...
- 91
2
votes
1
answer
2k
views
JBoss Web vulnerabilities [duplicate]
In my organization I found servers running JBoss Web/7.0.13.Final and JBoss Web/7.0.12.Final.
I could not find security vulnerabilities for this server's versions, but they seem old to me.
How can I ...
- 485
1
vote
0
answers
1k
views
CVSS Alternatives? [closed]
I am looking for suggestions of alternatives to vulnerability scoring systems such as CVSS & DREAD.
I have found that DREAD is too subjective to work and CVSS was ranking everything too highly ...
- 111
4
votes
3
answers
287
views
I want to hire someone on Upwork to install a bitcoin trading bot on a cloud server. What vulnerabilities should I watch out for?
Context
I tried installing Tribeca (a bitcoin trading bot) myself yesterday, but messed it up somehow, as I'm not very familiar with Docker/Git/NPM/mongoDB technologies (a little knowledge is ...
- 41
3
votes
1
answer
479
views
Adobe Flash and Meltdown / Spectre
Many browsers have received updates to protect against the Meltdown and Spectre attacks. I presume these patches relate (solely) to JavaScript execution within the browser. Java in the browser is as ...
- 4,623
1
vote
2
answers
1k
views
How can I change windows security settings using python? i.e. Password Requirements / Require Ctrl - Alt - Delete to log in
I am writing code in Python 2 or 3 to script Cybersecurity functions. Functions such as Lockout Duration, Password Length, and other things that involve a lot of clicking that could easily be ...
- 21
1
vote
0
answers
78
views
Is using AWS and administered VMs a reasonable and feasible secure environment?
I'm currently tasked with exploring options for hosting secure data for our company that don't require setting up any in-house infrastructure as we don't currently have any. Everyone is a developer ...
0
votes
3
answers
147
views
Is it recommended to patch announced vulnerability for unused services or features?
Sometimes vendors announce software upgrade to patch some discovered vulnerability in some feature or service which is not enabled in your system. Is it recommended to upgrade your software although ...
- 365
3
votes
2
answers
454
views
How do I secure my home Wi-Fi network in light of KRACK? [duplicate]
Now that KRACK has been discovered to exploit WPA2, is it still possible to secure my home Wi-Fi network? If so, what steps should I take to secure it against KRACK attacks? Will there now be a need ...
- 3,157
1
vote
1
answer
1k
views
How to acquire security advisory for CentOS?
I've been seeing security advisory number like CESA-2017:1842, and after search I could only find some of them in mailing list archives such as this.
Is there a website like https://usn.ubuntu.com or ...
- 281
0
votes
1
answer
203
views
Are CVE identifiers assigned for proprietary software packages? [duplicate]
If I find a vulnerability while using a proprietary software package can I request a CVE identifier. Or rather vulnerabilities in proprietary software packages are a matter of me reporting issue to ...
- 225
5
votes
2
answers
645
views
Why are the CVSS scores differ so much between Redhat and NVD page?
take CVE-2016-7872 for example.
in National Vulnerability Database webpage, we can see that the cvss2 and cvss3 score are 9.8 and 10.0 respectively.
but in the redhat security advisory page, they ...
- 281
25
votes
4
answers
4k
views
Should a vulnerability in a service that is present on the device, but not running and not used at all, be mentioned in the vulnerability report?
Say, I have scanned our Cisco Router, and it returned 20 vulnerabilities back. However, most of them are tied to specific services that this router is not running, for example CVE-2016-6380 - we are ...
- 458
1
vote
3
answers
4k
views
What is the difference between patch management and vulnerability management?
I've been thinking about this lately. are they the same thing? or is the latter has a lot more than just management of patches?
- 281
3
votes
1
answer
1k
views
What does a "-" mean in the Version field in Common Product Enumeration (CPE)?
I'm trying to understand the Common Product Enumeration standard published by Mitre. In the Version field, I've found references to "*" or ANY meaning "Any Version."
However, when I search the CPE ...
- 131
3
votes
0
answers
93
views
Are there any development tools that help with both asset management and vulnerability management? [closed]
I work for a software/system development company and I'm looking to improve how we manage information security within our development process. Much of what I have found in my initial research is ...
-1
votes
1
answer
148
views
Can browser emulation create vulnerabilities?
If a browser is not authorized on a network, can browser emulation within an authorized browser create vulnerabilities?
For instance, Chrome is unauthorized but if I run IE, press F12 to get into ...
- 209