Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Issue] - Health Checker - Vulnerability Detected marked as True #1154

Closed
JoelJerkin opened this issue Aug 10, 2022 · 2 comments · Fixed by #1158
Closed

[Issue] - Health Checker - Vulnerability Detected marked as True #1154

JoelJerkin opened this issue Aug 10, 2022 · 2 comments · Fixed by #1158

Comments

@JoelJerkin
Copy link

Provide Version Number
Provide the version of the script that has the issue.
22.08.09.0638

Describe the issue
A clear and concise description of the issue.

Running HealthChecker.ps1, the XML/HTML report Vulnerability Detected as True and Security Vulnerabilities will have DisplayWriteType value as "Red" when no "real" Security Vulnerability is detected, however Security Vulnerability reports the following output:
IIS module anomalies detected: False

Expected behavior
A clear and concise description of what you expected to happen.
When "Security Vulnerability" reports "IIS module anomalies detected: False", Vulnerability Detected should be False.

Script Output
If applicable, add the exception that wasn't handled.

Additional context
Add any other context about the problem here.



<Obj RefId="2493">
<TNRef RefId="153"/>
<ToString>HealthChecker.HtmlServerInformationRow</ToString>
<Props>
<S N="Name">IIS module anomalies detected</S>
<S N="DetailValue">False</S>
<Nil N="TableValue"/>
<Nil N="Class"/>
</Props>
</Obj>

<Obj RefId="2494">
<TNRef RefId="153"/>
<ToString>HealthChecker.HtmlServerInformationRow</ToString>
<Props>
<S N="Name">Security Vulnerabilities</S>
<S N="DetailValue">False<br></S>
<Nil N="TableValue"/>
<S N="Class">Red</S>
</Props>
</Obj>


<Obj RefId="2506">
<TNRef RefId="153"/>
<ToString>HealthChecker.HtmlServerInformationRow</ToString>
<Props>
<S N="Name">Vulnerability Detected</S>
<S N="DetailValue">True</S>
<Nil N="TableValue"/>
<S N="Class">Red</S>
</Props>
</Obj>

@cvocvo
Copy link

cvocvo commented Aug 10, 2022

Encountered the same issue after rolling out extended protection on Exchange 2019; from the HTML version of the report:

image

image

@dpaulson45 dpaulson45 self-assigned this Aug 10, 2022
@dpaulson45
Copy link
Member

Determined the cause of this.

When we added in the section of IIS Module check, we added this to the security vulnerability section, now it isn't null we flag it as Security Vulnerability detected but the displayed value of the IIS Module section is false, that is why we see a false value in the bottom section.

@dpaulson45 dpaulson45 changed the title [Issue] - Health Checker - Vulnerability Detected marked as True w [Issue] - Health Checker - Vulnerability Detected marked as True Aug 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants