Fix Groups resulting in negative risk score reductions
Incident Report for Cisco
Resolved
This incident has been resolved.
Posted Sep 20, 2021 - 17:12 CDT
Update
We are continuing to monitor for any further issues.
Posted Sep 19, 2021 - 22:40 CDT
Update
We are continuing to monitor for any further issues.
Posted Sep 19, 2021 - 21:18 CDT
Monitoring
A fix has been implemented and we are monitoring the results.
Posted Sep 17, 2021 - 16:51 CDT
Identified
The issue has been identified and we are working towards resolution. Thank you for your patience.
Posted Sep 17, 2021 - 11:58 CDT
Update
We are continuing to investigate the root cause of this issue. Thank you for your patience.
Posted Sep 17, 2021 - 09:44 CDT
Update
We are continuing to investigate the root cause of this issue. Thank you for your patience.
Posted Sep 16, 2021 - 12:04 CDT
Update
We are continuing to investigate this issue.
Posted Sep 15, 2021 - 20:26 CDT
Investigating
We are currently investigating an issue where top fix groups suggest a negative risk score reduction would result from applying a particular fix group. We have identified that fix groups addressing CVE-2021-40444 cause this problem, but the problem is also present in groups without this CVE. We are continuing to investigate and will provide updates as we know more. We thank you for your patience.
Posted Sep 15, 2021 - 17:06 CDT
This incident affected: US - 1 (Kenna UI, Kenna API), EU (Kenna UI, Kenna API), US - 2 (Kenna UI, Kenna API), and CA - 1 (Kenna UI, Kenna API).