Hosted EDR: Unable to Access Users Tab with 502 Bad Gateway
search cancel

Hosted EDR: Unable to Access Users Tab with 502 Bad Gateway

book

Article ID: 287914

calendar_today

Updated On:

Products

Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

When clicking on the users tab, a 502 Bad Gateway message is shown

Environment

  • Hosted EDR: All Versions

Cause

Python lxml library was updated causing instability in the call used to the SAML provider to access the page

Resolution

1/11/2024 - This has been fixed

A recent occurrence involving the release of the new version (5.0.0 and above) of the Python lxml library on December 30th has been identified as the root cause of the problem. This new version was automatically installed during the construction of portal containers, as it is a part of the dependent library.
Mitigation Strategy:
To address the issue, we have taken proactive measures by locking the lxml version to 4.9.3 in the flask requirements.txt file. This deliberate version constraint ensures compatibility and stability in our system, preventing any adverse effects associated with the newer versions.
References:
The issue has been documented and discussed on the following GitHub repositories:
  1. python3-saml
  2. python-xmlsec
These references provide additional context and insights into the challenges posed by the new lxml versions and the rationale behind our decision to lock the version in our requirements. (edited)