Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing Vulnerabilities from Openvas #255

Open
DBMNA opened this issue Jun 10, 2022 · 1 comment
Open

Missing Vulnerabilities from Openvas #255

DBMNA opened this issue Jun 10, 2022 · 1 comment

Comments

@DBMNA
Copy link

DBMNA commented Jun 10, 2022

Describe the bug
The number of vulnerabilities visible on PatrowlManager after an Openvas scan is way lower than the report directly available in Openvas web GUI.

I am not sure if this is a bug on PatrowlManager or PatrowlEngine so please let me know if I need to create the issue on PatrowlEngine.

To Reproduce
Steps to reproduce the behavior:
Run a scan via PatrowlManager and wait until scan completed.

Count number of vulnerability per severity on PatrowlManager and Openvas Web GUI and compare the results

Example:
Scan performed on a /24 subnet:
On Openvas:

  • 18 High
  • 69 Medium
  • 19 Low
  • 493 Log

On PatrowlManager:

  • 9 High
  • 18 Medium
  • 3 Low
  • 79 Info

Expected behavior:
Identical number of vulnerabilities on PatrowlManager and Openvas Web GUI

@GascPT
Copy link

GascPT commented Apr 28, 2023

Hi,
I have a similar issue.

My setup is compose of:

  • a network /24 to scan;
  • Patrowl Manager 1.8.4
  • GVMD 22.4.1.

I launch a scan from Patr0wl Manager with ip-subnet as the Asset and in the end I end up with these results.

In openVAS I have 72 hosts scanned.
image

In PatrowlManager I only have 59 assets imported
image

The vulnerabilities results are unsyncronized as well.

Best Regards,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants