CB ThreatHunter: Watchlist.reports returns the same report ID when iterating through a list
book
Article ID: 292448
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Looping through watchlist.reports returns the same watchlist name for each value
Environment
CB ThreatHunter: All Versions
CBAPI: 1.5.2 and Lower
Cause
Watchlist reports returns the same report because the url schema is overwritten so the next id can't be injected into the path
Resolution
Upgrade to cbapi 1.5.2 via the master branch in git
Additional Information
As of 9/20/2019, the current version of 1.5.2 available through pip does not have the patch for this issue. The fix must be pulled through the master branch via git