0
30.6.1
Australia, Zurich, Yokohama Patch 6, Yokohama, Xanadu Patch 9, Xanadu
Standalone Application
The Vulnerability Response application has been updated to correctly handle risk score recalculation when a risk change approval is in place. Previously, when a vulnerability scanner re-imported data, the system had no way to identify whether an approved risk change was an increase or a decrease, which could result in incorrect score adjustments. This update ensures the right risk score is applied consistently, even after a re-scan.
- Risk scores adjusted via an approved risk change are correctly maintained when vulnerability data is re-imported from a scanner
- The system accurately identifies the direction of an approved risk change (increase or decrease) to apply the correct score
- Works seamlessly alongside the Exception Management compensating controls workflow
New:
- Added support for preserving approved risk changes during vulnerability score recalculation.
Fixed:
- Fixed an issue where approved risk increases were not preserved after reimporting vulnerability scans.
- The following dependency plugins for Vulnerability Response must be activated:
- com.snc.vul_dep plugin for Vulnerability Response Dependencies
- The following Security Operations applications must be installed and activated:
- Security Integration Framework
- Security Support Common
- Security Support Orchestration
- Security Exposure Management (requires entitlement from the store)
- Permissions and roles
- Roles required:
- System Admin (admin) for installation
- For Configuration:
- Application Security Manager (User part of App-Sec Manager group) for Application Vulnerability Response
- For access to the Vulnerability Response Workspaces:
- IT Remediation Workspace: sn_vul.remediation_owner
- Roles required: