Software Patching Domain

Software Patching

Overview: The Software Patching domain highlights systems running end-of-life and vulnerable software, emphasizing the importance of timely patching to mitigate security risks. End-of-life software lacks vendor support and cannot be patched against known security vulnerabilities, increasing the likelihood of system compromise. The scan recommends addressing patching issues based on assigned risk priorities, determined by a combination of issue severity and asset value, utilizing the Common Vulnerability Scoring System (CVSS) rating for severity assessment. 

• Application Server Patching 

The scan has observed system(s) running end-of-life application server software with known security vulnerabilities. Remediation of these issues should be prioritized based on the assigned risk priority, with critical issues in high-value assets taking precedence. While addressing lower risk priority issues, such as low and medium severity issues in idle and low-value systems, should be evaluated on a case-by-case basis. 

• OpenSSL Patching 

The scan has identified system(s) running end-of-life versions of OpenSSL with known security vulnerabilities. Similar to application server patching, prioritizing remediation based on the assigned risk priority is crucial. Critical issues affecting high-value assets should be addressed first, while lower risk priority issues should be evaluated individually. 

• CMS Patching 

The scan has observed system(s) running end-of-life content management systems (CMS) with known security vulnerabilities. Prioritizing remediation according to the assigned risk priority is recommended, with critical issues in high-value assets taking precedence. Evaluation of lower risk priority issues should be conducted on a case-by-case basis. 

• Web Server Patching 

The scan has identified system(s) running end-of-life web server software with known security vulnerabilities. Remediation efforts should prioritize critical issues affecting high-value assets, followed by evaluation of lower risk priority issues on a case-by-case basis. 

Conclusion: Effective software patching is critical for maintaining system security and reducing the risk of exploitation. By prioritizing the remediation of end-of-life and vulnerable software based on assigned risk priorities, organizations can mitigate security risks and safeguard critical assets effectively.