The Zurich release has arrived! Interested in new features and functionalities? Click here for more

Vulnerability is closed but remediation status is in-flight

Malwinder
Giga Contributor

Hi,

I have few vulnerabilities where VIT is closed but remediation status is still showing In-flight, isnt it suppose to be either target missed or target met?

1 ACCEPTED SOLUTION

Chris McDevitt
ServiceNow Employee
ServiceNow Employee

Hi, I have seen this where the Detection / Vulnerable Item is created in the Closed State.

You can see evidence of this in the Notes tab / Activities. In the very first entry, the State is Closed.

find_real_file.png

To address this issue, add "and State is Open" as an additional Condition to your Remediation Target Rules.

 

View solution in original post

5 REPLIES 5

Chris McDevitt
ServiceNow Employee
ServiceNow Employee

Hi, I have seen this where the Detection / Vulnerable Item is created in the Closed State.

You can see evidence of this in the Notes tab / Activities. In the very first entry, the State is Closed.

find_real_file.png

To address this issue, add "and State is Open" as an additional Condition to your Remediation Target Rules.

 

Thank you Chris. 

 

Yes, you are right its when SN creates a VIT when state is closed. 

 

With the fix you suggested what will happen? I would like to know what's expected from this? 

Hi,

When you add "and State is Open" as an additional Condition, you prevent the VIT from being evaluated by the RTR. The Remediation Status on the VIT will then be set to 'No Target'.

Thank you so much. 

 

Can you please provide a screenshot as similar to what you provided above after you made the change in remediation target rules as suggested?