navzen2000

False Positive on ELSA-2022-4803

5

**What happened**: Grype reported ELSA-2022-4803 for below package on x86-64 linux NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY rsyslog 8.24.0-57.0.1.el7_9.3 0:8.24.0-57.0.4.el7_9.3 rpm ELSA-2022-4803 High **What you expected to happen**: ELSA-2022-4803 is...

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): BUG **Version of Anchore Engine and Anchore CLI if applicable**: 1.1.0 **What...

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): BUG **Version of Anchore Engine and Anchore CLI if applicable**: 1.1.0 **What...

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): **Version of Anchore Engine and Anchore CLI if applicable**: v1.1.0 **What happened**:...

Incorrect reporting of vulnerability against non fips package

1

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): BUG **Version of Anchore Engine and Anchore CLI if applicable**: **What happened**:...

False Positive CVE-2015-4035 reported against xz-1.9.jar

1

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): BUG REPORT **Version of Anchore Engine and Anchore CLI if applicable**: v1.0.1...

Feature Req: Include AV & Published Date in Vuln info

2

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): FEATURE REQUEST **Version of Anchore Engine and Anchore CLI if applicable**: **What...

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): BUG REPORT **Version of Anchore Engine and Anchore CLI if applicable**: 1.0.1...

**Is this a request for help?**: --- **Is this a BUG REPORT or a FEATURE REQUEST?** (choose one): BUG REPORT **Version of Anchore Engine and Anchore CLI if applicable**: anchore-cli,...

False positive : Kube bench node unable to read from Kubelet config file

7

Kube bench node reported: [FAIL] 4.2.1 Ensure that the anonymous-auth argument is set to false (Automated) [FAIL] 4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated) [FAIL]...