CBC: How to Handle CVE Questions

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

What question needs to be addressed regarding a particular CVE?

Environment

• Carbon Black Cloud:  All Supported Versions

Resolution

Many questions arise when a CVE is published, here are a few with recommendations:  

• Is the Carbon Black product vulnerable to this CVE?
• Does Carbon Black detect and report this CVE on the CBC Vulnerabilities page?
• Does Carbon Black have listed hashes of a CVE in a watchlist?
• Does Carbon Black alert on this action found in this CVE?
• After patching for this CVE, why is it still showing in the network?