You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe
Tenable Vulnerability Scanner use so called Plugins to check a given host for the existence of Vulnerabilities.
Plugins can be thought of as a Script telling the scanner "Connect to port X, check for the Version string Y and if found do Z" These Plugins do have a unique Id and the plugin content can change over time. In every scan export, the Plugin Id, Published Date and Modified Date are contained.
After importing the Scan information, the Information which Plugin Id and the date values of the Plugin are discarded so there is no possibility to check from Defect Dojo which Plugin Version was used to find the Vulnerability. This information could be valuable when investigating to find out exactly why and how the scanner detected a given vulnerability
Describe the solution you'd like
The Scan Plugin Information should be added to the References section of a given Vulnerability when a Tenable scan is imported. Format wise this could be appended as a new line like:
<Tenable Plugin Information: ID: 12345, Published: 01/01/24, Modified: 01/01/24>
The text was updated successfully, but these errors were encountered:
Thank you very much :)
Had an implementation pretty much at the ready, but hesitated because i did not manage to get the unittests to run in my environment
Thank you very much :) Had an implementation pretty much at the ready, but hesitated because i did not manage to get the unittests to run in my environment
No worries. Regarding the unittests, take a look here: #11143
Is your feature request related to a problem? Please describe
Tenable Vulnerability Scanner use so called Plugins to check a given host for the existence of Vulnerabilities.
Plugins can be thought of as a Script telling the scanner "Connect to port X, check for the Version string Y and if found do Z" These Plugins do have a unique Id and the plugin content can change over time. In every scan export, the Plugin Id, Published Date and Modified Date are contained.
After importing the Scan information, the Information which Plugin Id and the date values of the Plugin are discarded so there is no possibility to check from Defect Dojo which Plugin Version was used to find the Vulnerability. This information could be valuable when investigating to find out exactly why and how the scanner detected a given vulnerability
Describe the solution you'd like
The Scan Plugin Information should be added to the References section of a given Vulnerability when a Tenable scan is imported. Format wise this could be appended as a new line like:
<Tenable Plugin Information: ID: 12345, Published: 01/01/24, Modified: 01/01/24>
The text was updated successfully, but these errors were encountered: