Hello, are we able to get a new QID that will pick up CVE-2021-4104 when using the out of band scanner?
From the example readme file:
Log4j Found: 'D:\Temp\log4j-1.2.17.jar' ( Manifest Vendor: Apache Software Foundation, Manifest Version: 1.2.17, JNDI Class: NOT Found, Log4j Vendor: log4j, Log4j Version: 1.2.17, CVE Status: Potentially Vulnerable ( CVE-2021-4104: Found ) )
Log4j Found: 'D:\Temp\log4j-1.2.17.zip!apache-log4j-1.2.17/log4j-1.2.17.jar' ( Manifest Vendor: Apache Software Foundation, Manifest Version: 1.2.17, JNDI Class: NOT Found, Log4j Vendor: log4j, Log4j Version: 1.2.17, CVE Status: Potentially Vulnerable ( CVE-2021-4104: Found ) )
When the out of band scanner runs and the Qualys agent picks up the out of band scan data from the host, CVE-2021-4104 is being listed under QIDs 376193, 376160, 376195 ,376210 which have a different CVE associated with them.
Example:
Can we get a new QID created specifically for CVE-2021-4104 utilizing the out of band scanner?
Thank you
Hello, are we able to get a new QID that will pick up CVE-2021-4104 when using the out of band scanner?
From the example readme file:
Log4j Found: 'D:\Temp\log4j-1.2.17.jar' ( Manifest Vendor: Apache Software Foundation, Manifest Version: 1.2.17, JNDI Class: NOT Found, Log4j Vendor: log4j, Log4j Version: 1.2.17, CVE Status: Potentially Vulnerable ( CVE-2021-4104: Found ) )
Log4j Found: 'D:\Temp\log4j-1.2.17.zip!apache-log4j-1.2.17/log4j-1.2.17.jar' ( Manifest Vendor: Apache Software Foundation, Manifest Version: 1.2.17, JNDI Class: NOT Found, Log4j Vendor: log4j, Log4j Version: 1.2.17, CVE Status: Potentially Vulnerable ( CVE-2021-4104: Found ) )
When the out of band scanner runs and the Qualys agent picks up the out of band scan data from the host, CVE-2021-4104 is being listed under QIDs 376193, 376160, 376195 ,376210 which have a different CVE associated with them.
Example:
Can we get a new QID created specifically for CVE-2021-4104 utilizing the out of band scanner?
Thank you