topic How to address QID: 11827 vulnerability in Server Management - Systems Insight Manager

How to address QID: 11827 vulnerability

Sofia_ — Tue, 29 Sep 2020 15:05:29 GMT

Hello,

Can someone please share on how to address QID: 11827 vulnerability on HPE SIM?

Qualys complaining about HTTP Security Header Not Detected

X-XSS-Protection HTTP Header missing on port 50001. GET / HTTP/1.1 Host: hostname:50001 Connection: Keep-Alive HTTP/1.1 200 OK Server: Apache-Coyote/1.1 Pragma: No-cache Cache-Control: no-store

Thanks in advance,

Sofia

Re: How to address QID: 11827 vulnerability

BH_S — Wed, 30 Sep 2020 14:27:12 GMT

Hello Sofia,

To address the issue with QID: 11827 vulnerability , I would first request you to bring SIM to supported version v7.6

Please check SIM Matrix document :

https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c04273185

Kindly update to latest SIM 7.6 LR4 update and check status

If still vulnerability reported kindly log a support case by capturing latest simcapture logs and screenshot of issue reported.

Thanks,

HPE Employee.

Re: How to address QID: 11827 vulnerability

Sofia_ — Mon, 05 Oct 2020 09:41:22 GMT

Hello BH_S,

Thank you for your reply.

How did you know we are running one version behind?

Btw, do you have any documentation on how to upgrade from v7.5 to 7.6?

Many thanks in advance,

Sofia