Vulnerability Reports

This section provides a comprehensive view of all vulnerability reports across time for every node. By analyzing the trends of the reports, one can gain a better understanding of the evolution of the security posture of the systems. The overview allows for a more thorough analysis of the data, which in turn enables informed decisions to be made regarding the prioritization of security patches and updates. Additionally, by examining the reports over time, one can identify recurring security issues that may require further investigation and remediation. Overall, This section serves as a valuable tool for enhancing the security of the system and mitigating potential vulnerabilities.

Search

In the search field, you can enter different parameters to narrow down the reports shown in the table. For example, you can search for specific node names or Puppet environments to filter out unwanted information.

Reports table

The reports table provides the following information for each compliance report:

Vulnerability Report details

This section provides an extensive and detailed overview of the selected vulnerability report. The report includes a thorough analysis of the identified vulnerabilities, highlighting their potential impact on the system. Overall, this report is an invaluable resource for anyone looking to enhance the security of their system and protect against potential threats and attacks.

Report statistics

At the top of the InControl page, detailed statistics are displayed to provide you with an overview of your vulnerabilities. These statistics provide information on the number of critical, high, medium, low and skipped vulnerabilities. For each severity, InControl will show you the current and previous numbers of vulnerabilities with that severity. Moreover, if there is a change between the current and previous numbers, InControl will display the difference as an absolute number and as a percentage, so that you can see at a glance how your vulnerabilities have been progressing. The color of the indicator will also inform you whether it is an improvement or a decline. Green indicates an improvement, and red indicates a decline. Therefore, these statistics are incredibly useful for monitoring the progress of your vulnerabilities and identifying areas for improvement.

Report change log

While the statistics at the top of the page provide a useful overview, it is important to delve deeper into the data to gain a full understanding of the changes that have occurred. InControl recognizes this need and offers a change log to help users identify the differences between the previous and current reports.

The change log displays a detailed account of what vulnerabilities of what severity have identified, or have been fixed on your systems. Allowing users to gain a comprehensive understanding of the changes that have occurred. By using the change log, you can quickly identify areas that require attention and address them before they become problematic.

Moreover, the log provides a complete history of changes made to the vulnerability state, which can be extremely useful for tracking and auditing purposes. It ensures that all changes made to the vulnerability state are recorded accurately, enabling users to easily review and approve them.

Detected Vulnerabilties

This table contains a list of all the vulnerabilities that where detected as part of this report.

In addition to the default “All” tab, several other tabs are available, including “Critical,” “High,” “Medium,” “Low,” and “Skipped.” This feature allows users to filter and view vulnerabilities based on their severity, which is particularly useful for those who need to focus on specific vulnerabilities or who want to get an overview of the severity of vulnerabilities across all nodes.