Vulnerability scanner is generating an alert for CIS-CAT Pro Assessor

Problem

Solution

Each release of CIS-CAT Pro Assessor includes key information in in the changelog section of the online documentation:
7. Change Log - CIS-CAT Pro Assessor v4

• CIS-CAT now delivers with a Software Bill of Materials (SBOM) located in the documentation directory (Assessor-CLI\Documentation\SBOM_CIS_CAT_Pro_Assessor)

• An updated README.txt document (Assessor-CLI\README.txt) with the list of suppressed third party security vulnerabilities from dependent libraries.

The README.txt will list third-party dependent libraries which may appear on vulnerability reports. CIS-CAT implements a vulnerability scanning process during all build implementations. In some cases, it is necessary to suppress false positives or vulnerabilities caused by libraries pending updates by third parties.

Keywords;

Content by Label