Alert "Critical CVE Matched" Lacks Actionable Data

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

When the Alert for Critical CVE Matched is triggered, no actionable data is available.

Environment

• App Control Server: 8.10.2 and higher
• Common Platform Enumeration

Cause

Alerts are triggered by Events, and the Event Critical CVE Matched currently does not include which CVE, application, or endpoint was matched.

Resolution

A feature request has been opened and is being tracked under EPCB-21311.