What to Collect to Verify a CVE Vulnerability Error is Occurring

Products

• Carbon Black Cloud Workload
• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

What data is needed to confirm or troubleshoot a potential False Positive or False Negative CVE?

Environment

• Carbon Black Cloud Console: All Versions
• Vulnerability Management: All Versions

Resolution

Collect the following items:

1. HAR file from the console showing the error
2. Collect sensor logs from the device to confirm the OS information is being reported correctly
3. Pull installed patch information for the patch which should resolve the vulnerability

Additional Information

• Linux Vulnerabilities Not Showing
• Reassess Button Missing