Comments (4)
A possible explanation is that the asset you were previously able to scan is now a member of another site which is picked by find_device_by_address (it picks the first match when the asset belongs to multiple sites) and the asset is excluded from scans of that site.
from nexpose-client.
I don't think that is it. I just had a successful scan on a Global asset using this method, so now it seems there is some other limitation. Other Global assets are still failing, not sure what the link is yet.
from nexpose-client.
@tmsteen - In version 6.5.7, Nexpose added the ability to create sites without specifying any scan targets. I'm wondering if this might be related. Can you confirm what version of Nexpose you are running and whether or not you have any scan targets in the specified site? It's possible this is an issue with the product and not the gem. Was that site dynamic or static? If dynamic, what type of discovery connection is backing it? What type of asset is this?
Edit: I missed your blurb at the bottom stating you are using 6.5.5.
from nexpose-client.
The sites have assets configured. There is a known 'issue' in that I cannot kick of scans for sites without asset or scans where the assets are defined but have not been scanned yet due to the lack of an asset ID.
I have not explicitly tried on sites configured with dynamic assets. All test cases have been in static sites.
I did just see this for last week's product release (6.5.8): "We fixed an issue where scans launched via API request would fail for sites configured with asset group targets". I had failures for sites without asset groups but perhaps there is some other lingering logic.
Now that I see that the issue is not all but just some global assets I need to see if I can nail down another commonality.
from nexpose-client.
Related Issues (20)
- XML::VulnerabilityDetail/Complete API missing an instances value for vulnerabilities HOT 2
- Credentials failure after using Site.copy HOT 3
- Unknown SSH Handshake error HOT 5
- Api call to Generate Scan Engine Shared Secret HOT 1
- Is there any 2.1 API(i.e json support one) to get device vulnerability details ? HOT 3
- list_vuln_exceptions returns API error HOT 9
- APIError HTTP 500 when updating one tag with existing search_criteria HOT 3
- No data returned for vulnerability id and asset id in list_vuln_exceptions
- user.save(connection) causes a Null Pointer Exception HOT 1
- No method to save search criteria for a dynamic site? HOT 4
- api/3/assets/{id}/software returns HTTP.500 error HOT 2
- OpenSSL certificate verify failed HOT 7
- [QUESTION] How to generate Shared Secret via RESTful API? HOT 2
- job failure in servicenow HOT 1
- Login Failed when update nexpose-client 2.0.2 to 7.2.1 HOT 2
- Hostname not recognized by util.rb/convert with Ruby 2.6.3 HOT 2
- Stuck on maintenance mode page HOT 1
- Scan engine Issue HOT 1
- FQDN not recognized by util.rb/convert with Ruby 2.7.2 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nexpose-client.