Closed/False positive Vulnerable items changed to Closed/Stale

aislingo
Tera Contributor

Anyone else seeing this issue? 

 

We marked the VIT state to closed/false positive by submitting the false positive request. After approval on example VCAXXXXXX, state of VIT changes to Closed and sub state to False Positive.

Later VR.system updated the VIT state to Stale which is not the expected behavior.

 

Verified as a product defect and PRB has been opened, just wondering how many other users are affected

1 REPLY 1

andy_ojha
ServiceNow Employee

Hey there,

Out of curiosity, on your Auto-Close Rule -> is the setting "Ignore already closed items" selected/enabled?

I had thought this setting would ignore VITs that are Closed in general (regardless of Substate being Fixed, False-Positive, etc) - but as you said, there might be an issue if you already have a PRB.

andy_ojha_1-1784691357810.png