Re: Vulnerability scanning

[Stuart MacIntosh <stuart@xxxxxxxxxxxx>]

The specific vulnerability should have a CVE, look that up on mitre and 
see if it actually relates to IBM i? That might be what IBM mean by 'not 
using' the stack, could be a simple explanation!

It may also be worth asking Tenable if Nessus can even detect the 
QHTTPSVR or has any specific tests for it. It does not appear well 
represented here:

https://www.tenable.com/plugins/search?q=ibm+iseries&sort=&page=1 
<https://www.tenable.com/plugins/search?q=ibm+iseries&sort=&page=1>

https://www.tenable.com/plugins/search?q=QHTTPSVR&sort=&page=1 
<https://www.tenable.com/plugins/search?q=QHTTPSVR&sort=&page=1>

-Stuart

On 15/08/24 08:29, DEnglander--- via MIDRANGE-L wrote:
> Thank you to all who replied. One thing I forgot to mention was that when
> the QHTTPSVR subsystem is ended and the scan rerun, the vulnerability goes
> away. The only jobs in that subsystem are: ADMIN, ADMIN1, ADMIN2, ADMIN3,
> ADMIN4, and ADMIN5. However, another scan was run and now, even without
> the QHTTPSVR running, Nessus is still listing the vulnerability.
>
> I reported this to IBM, but their answer is no different. IBM's response
> is to ask Nessus what is causing the error to happen when there is no Trek
> stack used. No response from Nessus yet.
>
> Doug
>
>
> "CONFIDENTIALITY NOTICE:  This e-mail transmission (and/or the attachments accompanying it) contain confidential information belonging to the sender.  The information is intended only for the use of the intended recipient.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of the information is strictly prohibited.  Any unauthorized interception of this transmission is illegal under the law.  If you have received this transmission in error, please promptly notify the sender by reply e-mail, and then destroy all copies of the transmission."