You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bug description
When a finding have risk accepted status in DefectDojo it cannot be closed (mitigated) by new test import (tested on Tenable importer).
Steps to reproduce
Steps to reproduce the behavior:
Import some test results
Add Risk Acceptance to one of the findings in DefectDojo
Remove earlier accepted finding from test results file
Import modified file
See that risk accepted finding is not mitigated
Expected behavior
When risk accepted finding is fixed it should change status to "Mitigated" and "Risk acceptance" status should (probably) be removed, because Risk acceptance is no longer needed for non existing vulnerability.
Deployment method(select with an X)
Docker Compose
Kubernetes
GoDojo
DefectDojo Version
tested on: 2.35.2 and 2.37.1
The text was updated successfully, but these errors were encountered:
@mtesauro sadly it was not fixed in version 2.38.0 :( I just tested it and risk accepted findings are not getting mitigated during new import with close old findings option checked.
Bug description
When a finding have risk accepted status in DefectDojo it cannot be closed (mitigated) by new test import (tested on Tenable importer).
Steps to reproduce
Steps to reproduce the behavior:
Expected behavior
When risk accepted finding is fixed it should change status to "Mitigated" and "Risk acceptance" status should (probably) be removed, because Risk acceptance is no longer needed for non existing vulnerability.
Deployment method (select with an
X
)DefectDojo Version
tested on: 2.35.2 and 2.37.1
The text was updated successfully, but these errors were encountered: