Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix report host end time check in CVE scans #1462

Merged
merged 2 commits into from
Mar 24, 2021

Conversation

timopollmeier
Copy link
Member

@timopollmeier timopollmeier commented Mar 24, 2021

What:
When looking up the latest finished report_host for a CVE scan, the
query will also consider the end_time being set to 0 instead of NULL
when the scan of the host is unfinished.

Why:
Without this the CVE scan could return no or less results for hosts
being scanned at the moment.

How did you test it:

  • ran an authenticated "Full and Fast" scan of a single host with vulnerable applications,
  • confirmed that the applications were detected after the scan was finished
  • ran a CVE scan using the same target and confirmed that it produced results
  • started the "Full and Fast" task again
  • started the CVE scan again while the other task was running and at a low progress percentage (1-2%)

Without the fix the second CVE scan produced no results, while it produces the same results as the first scan with the fix.

Checklist:

When looking up the latest finished report_host for a CVE scan, the
query will also consider the end_time being set to 0 instead of NULL
when the scan of the host is unfinished.

Without this the CVE scan could return no or less results for hosts
being scanned at the moment.
@timopollmeier timopollmeier added backport-to-stable This pull request will be backported to the stable branch backport-to-main This pull request will be ported to the master branch labels Mar 24, 2021
@timopollmeier timopollmeier marked this pull request as ready for review March 24, 2021 11:27
@timopollmeier timopollmeier requested a review from a team as a code owner March 24, 2021 11:27
@cfi-gb
Copy link
Member

cfi-gb commented Mar 24, 2021

@timopollmeier @bjoernricks Looks like this could also fix #1385 or am i wrong?

timopollmeier added a commit that referenced this pull request Mar 24, 2021
Fix report host end time check in CVE scans (bp #1462)
timopollmeier added a commit that referenced this pull request Mar 24, 2021
Fix report host end time check in CVE scans (bp #1462)
@timopollmeier timopollmeier deleted the cve-scan-fix branch October 15, 2021 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-to-main This pull request will be ported to the master branch backport-to-stable This pull request will be backported to the stable branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants