ThreatMapper
ThreatMapper copied to clipboard
[v2] Base OS vulnerabilities not scanned in vulnerability scan
Describe the bug Base OS packages are not scanned when initiating vulnerability scan.
To Reproduce Steps to reproduce the behavior:
- Go to 'Topology'
- Click on 'Hosts' tab and click on any host in the list
- Click on Scan dropdown on the top right of the sidebar and select 'Start Vulnerability Scan'
- In the new pop-up in the sidebar, no information/checkbox to indicate that base OS vulnerabilities will be scanned.
- Once scan is complete, no OS vulnerabilties
Expected behavior Base OS vulnerabilities also need to be scanned for, other than language vulnerabilities
Screenshots
Components/Services affected
- [x] UI/Frontend
- [x] API/Backend
- [ ] Agent
- [ ] Deployment/YAMLs
- [ ] CI/CD Integration
- [ ] Other (specify)
@jatin-baweja Please elaborate on the changes you want us to make.
@manV Need to add additional {"language": "base"}
in scan_config
array in start vulnerability scan request and a disabled checkbox in the UI saying OS Packages
like we had earlier