VR - missing VIT
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-06-2025 10:38 AM - edited 05-06-2025 10:41 AM
We have been running VR in prod for almost a year. Our SN VR is integrated with Rapid7.
Came across a scenario that is baffling. The jobs seem to be successful but came across an asset. The Discovered Item record created successfully but there was no Vulnerable Item record and no Remediation Task. When we check for other DIs without VIT, we have over 100 records. Has anyone come across this
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 11:02 AM
It is possible to retrieve assets without any vulnerabilities. This just means that the asset was scanned by R7. This happens with the other infra VR scanners as well(Qualys, Tenable, etc...)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-13-2025 11:09 AM
John,
It is not about assets without vulnerabilities. The scanner has detected vulnerabilities for asset in question. and these detections have been integrated for the asset in question. The DI is successfully associated with a CI. There are vulnerability detections and VIT is created. But the VIT is without CI and the VIT is not associated with DI.