Hello,
My question is: can we see what was updated in a QID?
For example, did 90454 change from a sev 2 to a sev 5? What was modified on 11/08/2013?
Detail:
We had some QID 90454 vulnerabilities show up on our reports in November 2013, but they were detected in March 2013. We have search lists that filter our vulnerabilities for us so I assumed we changed a search list or policy, but I noticed that the QID was updated around the same time as the ticket was created, 11/08/2013 at 18:20:30 (GMT-0500). This means it's likely that tickets were created because of a change in the QID, not our policies.
I receive new QID announcement emails from support, but I don't see 90454 in the list for November. I'm guessing that's because it wasn't new, just an update.
Thank you!
Hi Chad,
Presently there isn't an area within the QualysGuard Knowledgebase that provides details about QID modifications.
Typically when a customer reports a problem with a QID, our Support Team will keep in contact with the cusotmer until there is a fix available.
Sometimes the Modified Date changes based on Knowledgebase content. For example: An out-of-date third party URL is updated.
QID 90454 was updated on 11-08-2013 for a cosmetic change in the Knowledgebase. The QID did not show the Half Red / Half Yellow for the severity level. This was an error on our end.
There was no changes to the severity level number.
If you have any further questions, please don't hesitate to contact Support.
Best regards,
Craig