PaloAltoNetworks · eric-bischoff · Jun 20, 2023 · Jun 20, 2023 · Jun 22, 2023 · Jun 27, 2023
diff --git a/...s/v20_12_541/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc b/...s/v20_12_541/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc
diff --git a/...gs/v20_12_541/console_vulnerabilities.csv → ...1/attachments/console_vulnerabilities.csv b/...gs/v20_12_541/console_vulnerabilities.csv → ...1/attachments/console_vulnerabilities.csv
diff --git a/.../v20_12_541/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc b/.../v20_12_541/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc
diff --git a/...s/v20_12_541/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv b/...s/v20_12_541/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv
diff --git a/...gs/v20_12_541/scan_results_20_12_541.adoc → ...1/attachments/scan_results_20_12_541.adoc b/...gs/v20_12_541/scan_results_20_12_541.adoc → ...1/attachments/scan_results_20_12_541.adoc
diff --git a/...s/v21_04_412/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc b/...s/v21_04_412/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc
diff --git a/...gs/v21_04_412/console_vulnerabilities.csv → ...2/attachments/console_vulnerabilities.csv b/...gs/v21_04_412/console_vulnerabilities.csv → ...2/attachments/console_vulnerabilities.csv
diff --git a/.../v21_04_412/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc b/.../v21_04_412/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc
diff --git a/...s/v21_04_412/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv b/...s/v21_04_412/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv
diff --git a/...lease_Findings/v21_04_412/v21_04_412.adoc → ...gs/v21_04_412/attachments/v21_04_412.adoc b/...lease_Findings/v21_04_412/v21_04_412.adoc → ...gs/v21_04_412/attachments/v21_04_412.adoc
diff --git a/...s/v21_04_421/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc b/...s/v21_04_421/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc
diff --git a/...gs/v21_04_421/console_vulnerabilities.csv → ...1/attachments/console_vulnerabilities.csv b/...gs/v21_04_421/console_vulnerabilities.csv → ...1/attachments/console_vulnerabilities.csv
diff --git a/.../v21_04_421/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc b/.../v21_04_421/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc
diff --git a/...s/v21_04_421/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv b/...s/v21_04_421/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv
diff --git a/...lease_Findings/v21_04_421/v21_04_421.adoc → ...gs/v21_04_421/attachments/v21_04_421.adoc b/...lease_Findings/v21_04_421/v21_04_421.adoc → ...gs/v21_04_421/attachments/v21_04_421.adoc
diff --git a/...s/v21_04_439/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc b/...s/v21_04_439/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc
diff --git a/...gs/v21_04_439/console_vulnerabilities.csv → ...9/attachments/console_vulnerabilities.csv b/...gs/v21_04_439/console_vulnerabilities.csv → ...9/attachments/console_vulnerabilities.csv
diff --git a/.../v21_04_439/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc b/.../v21_04_439/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc
diff --git a/...s/v21_04_439/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv b/...s/v21_04_439/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv
diff --git a/...lease_Findings/v21_04_439/v21_04_439.adoc → ...gs/v21_04_439/attachments/v21_04_439.adoc b/...lease_Findings/v21_04_439/v21_04_439.adoc → ...gs/v21_04_439/attachments/v21_04_439.adoc
diff --git a/...s/v21_08_514/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc b/...s/v21_08_514/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc
diff --git a/...gs/v21_08_514/console_vulnerabilities.csv → ...4/attachments/console_vulnerabilities.csv b/...gs/v21_08_514/console_vulnerabilities.csv → ...4/attachments/console_vulnerabilities.csv
diff --git a/.../v21_08_514/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc b/.../v21_08_514/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc
diff --git a/...s/v21_08_514/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv b/...s/v21_08_514/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv
diff --git a/...lease_Findings/v21_08_514/v21_08_514.adoc → ...gs/v21_08_514/attachments/v21_08_514.adoc b/...lease_Findings/v21_08_514/v21_08_514.adoc → ...gs/v21_08_514/attachments/v21_08_514.adoc
diff --git a/...s/v21_08_520/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc b/...s/v21_08_520/console_vulnerabilities.adoc → .../attachments/console_vulnerabilities.adoc
diff --git a/...gs/v21_08_520/console_vulnerabilities.csv → ...0/attachments/console_vulnerabilities.csv b/...gs/v21_08_520/console_vulnerabilities.csv → ...0/attachments/console_vulnerabilities.csv
diff --git a/.../v21_08_520/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc b/.../v21_08_520/defender_vulnerabilities.adoc → ...attachments/defender_vulnerabilities.adoc
diff --git a/...s/v21_08_520/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv b/...s/v21_08_520/defender_vulnerabilities.csv → .../attachments/defender_vulnerabilities.csv
diff --git a/...gs/v21_08_520/scan_results_21_08_520.adoc → ...0/attachments/scan_results_21_08_520.adoc b/...gs/v21_08_520/scan_results_21_08_520.adoc → ...0/attachments/scan_results_21_08_520.adoc
diff --git a/...ublic_sector/Release_Findings/v21_08_525/attachments/openscap_console_21_08_525_stig.html b/...ublic_sector/Release_Findings/v21_08_525/attachments/openscap_console_21_08_525_stig.html
diff --git a/...blic_sector/Release_Findings/v21_08_525/attachments/openscap_defender_21_08_525_stig.html b/...blic_sector/Release_Findings/v21_08_525/attachments/openscap_defender_21_08_525_stig.html
diff --git a/compute/public_sector/Release_Findings/v21_08_525/console_vulnerabilities.adoc b/compute/public_sector/Release_Findings/v21_08_525/console_vulnerabilities.adoc
diff --git a/compute/public_sector/Release_Findings/v21_08_525/console_vulnerabilities.csv b/compute/public_sector/Release_Findings/v21_08_525/console_vulnerabilities.csv
diff --git a/compute/public_sector/Release_Findings/v21_08_525/defender_vulnerabilities.adoc b/compute/public_sector/Release_Findings/v21_08_525/defender_vulnerabilities.adoc
diff --git a/compute/public_sector/Release_Findings/v21_08_525/defender_vulnerabilities.csv b/compute/public_sector/Release_Findings/v21_08_525/defender_vulnerabilities.csv
diff --git a/compute/public_sector/Release_Findings/v21_08_525/scan_results_21_08_525.adoc b/compute/public_sector/Release_Findings/v21_08_525/scan_results_21_08_525.adoc
diff --git a/...ublic_sector/Release_Findings/v22_01_840/attachments/openscap_console_22_01_840_stig.html b/...ublic_sector/Release_Findings/v22_01_840/attachments/openscap_console_22_01_840_stig.html
diff --git a/...blic_sector/Release_Findings/v22_01_840/attachments/openscap_defender_22_01_840_stig.html b/...blic_sector/Release_Findings/v22_01_840/attachments/openscap_defender_22_01_840_stig.html
diff --git a/compute/public_sector/Release_Findings/v22_01_840/console_vulnerabilities.adoc b/compute/public_sector/Release_Findings/v22_01_840/console_vulnerabilities.adoc
diff --git a/compute/public_sector/Release_Findings/v22_01_840/defender_vulnerabilities.adoc b/compute/public_sector/Release_Findings/v22_01_840/defender_vulnerabilities.adoc
diff --git a/compute/public_sector/Release_Findings/v22_01_840/scan_results_22_01_840.adoc b/compute/public_sector/Release_Findings/v22_01_840/scan_results_22_01_840.adoc
diff --git a/compute/public_sector/Release_Findings/v30_01_153/v30_01_153.adoc b/compute/public_sector/Release_Findings/v30_01_153/v30_01_153.adoc
@@ -21,7 +21,6 @@ Findings for Prisma Cloud Compute Console.
 
 You can find the OpenSCAP report https://cdn.twistlock.com/docs/attachments/openscap_console_30_01_153_stig.html[here]
 
-
 [cols="4,4,4,4", options="header"]
 |===
 
@@ -58,21 +57,44 @@ You can find the OpenSCAP report https://cdn.twistlock.com/docs/attachments/open
 
 |===
 
+
 ==== Vulnerabilities full report
 
 
 You can find the full vulnerabilities report https://docs.google.com/spreadsheets/d/1jZwm_dMBQ5tr0ilEIdGkbLHnQCdj04CxU7o-VSwizuo/edit#gid=1038380747[here].
 
-
 [cols="3,4,4,4,4", options="header"]
-//|===
+|===
 
 |CVE
 |Package
 |Version
 |Fix Status
 |Justification
 
+|CVE-2022-1996
+|go-restful
+|2.9.5
+|Fixed in 3.8.0
+|The package is a transitive dependency that is being pulled with k8s.io/client-go and k8s.io/kube-openapi, and is not being used directly in the Compute Defender and Console. 
+
+|CVE-2023-29402
+|go
+|1.20.4
+|fixed in 1.20.5, 1.19.10
+|To be patched in next update, Maxwell Update 2
+
+|CVE-2023-29404
+|go
+|1.20.4
+|fixed in 1.20.5, 1.19.10
+|To be patched in next update, Maxwell Update 2
+
+|CVE-2023-29405
+|go
+|1.20.4
+|fixed in 1.20.5, 1.19.10
+|To be patched in next update, Maxwell Update 2
 
 |===
 
@@ -122,6 +144,28 @@ You can find the full vulnerabilities report https://docs.google.com/spreadsheet
 |Fix Status
 |Justification
 
-
+|CVE-2022-1996
+|go-restful
+|2.9.5
+|Fixed in 3.8.0
+|The package is a transitive dependency that is being pulled with k8s.io/client-go and k8s.io/kube-openapi, and is not being used directly in the Compute Defender and Console. 
+
+|CVE-2023-29402
+|go
+|1.20.4
+|fixed in 1.20.5, 1.19.10
+|To be patched in next update, Maxwell Update 2 
+
+|CVE-2023-29404
+|go
+|1.20.4
+|fixed in 1.20.5, 1.19.10
+|To be patched in next update, Maxwell Update 2
+
+|CVE-2023-29405
+|go
+|1.20.4
+|fixed in 1.20.5, 1.19.10
+|To be patched in next update, Maxwell Update 2
 
 |===
diff --git a/compute/public_sector/Release_Findings/v30_02_123/v30_02_123.adoc b/compute/public_sector/Release_Findings/v30_02_123/v30_02_123.adoc
@@ -47,7 +47,22 @@ You can find the OpenSCAP report https://cdn.twistlock.com/docs/attachments/open
 
 You can find the full vulnerabilities report https://docs.google.com/spreadsheets/d/1jZwm_dMBQ5tr0ilEIdGkbLHnQCdj04CxU7o-VSwizuo/edit#gid=591762497[here].
 
+[cols="3,4,4,4,4", options="header"]
+|===
+
+|CVE
+|Package
+|Version
+|Fix Status
+|Justification
 
+|CVE-2022-1996
+|go-restful
+|2.9.5
+|Fixed in 3.8.0
+|The package is a transitive dependency that is being pulled with k8s.io/client-go and k8s.io/kube-openapi, and is not being used directly in the Compute Defender and Console. 
+
+|===
 
 === twistlock/private:defender_30_02_123
 
@@ -62,5 +77,21 @@ You can find the OpenSCAP report https://cdn.twistlock.com/docs/attachments/open
 
 You can find the full vulnerabilities report https://docs.google.com/spreadsheets/d/1jZwm_dMBQ5tr0ilEIdGkbLHnQCdj04CxU7o-VSwizuo/edit#gid=1319211367[here].
 
+[cols="3,4,4,4,4", options="header"]
+|===
+
+|CVE
+|Package
+|Version
+|Fix Status
+|Justification
+
+|CVE-2022-1996
+|go-restful
+|2.9.5
+|Fixed in 3.8.0
+|The package is a transitive dependency that is being pulled with k8s.io/client-go and k8s.io/kube-openapi, and is not being used directly in the Compute Defender and Console. 
+
+|===
 
 
diff --git a/compute/public_sector/Release_Findings/v30_03_122/v30_03_122.adoc b/compute/public_sector/Release_Findings/v30_03_122/v30_03_122.adoc
@@ -42,12 +42,27 @@ You can find the OpenSCAP report https://cdn.twistlock.com/docs/attachments/open
 
 |===
 
-==== Vulnerabilities full report
 
+==== Vulnerabilities full report
 
 You can find the full vulnerabilities report https://docs.google.com/spreadsheets/d/1jZwm_dMBQ5tr0ilEIdGkbLHnQCdj04CxU7o-VSwizuo/edit#gid=899808966[here].
 
+[cols="3,4,4,4,4", options="header"]
+|===
+
+|CVE
+|Package
+|Version
+|Fix Status
+|Justification
+
+|CVE-2022-1996
+|go-restful
+|2.9.5
+|Fixed in 3.8.0
+|The package is a transitive dependency that is being pulled with k8s.io/client-go and k8s.io/kube-openapi, and is not being used directly in the Compute Defender and Console. 
 
+|===
 
 === twistlock/private:defender_30_03_122
 
@@ -62,5 +77,20 @@ You can find the OpenSCAP report https://cdn.twistlock.com/docs/attachments/open
 
 You can find the full vulnerabilities report https://docs.google.com/spreadsheets/d/1jZwm_dMBQ5tr0ilEIdGkbLHnQCdj04CxU7o-VSwizuo/edit#gid=1684081302[here].
 
+[cols="3,4,4,4,4", options="header"]
+|===
+
+|CVE
+|Package
+|Version
+|Fix Status
+|Justification
+
+|CVE-2022-1996
+|go-restful
+|2.9.5
+|Fixed in 3.8.0
+|The package is a transitive dependency that is being pulled with k8s.io/client-go and k8s.io/kube-openapi, and is not being used directly in the Compute Defender and Console. 
 
+|===
 
diff --git a/compute/public_sector/Release_Findings/v31_00_129/attachments/disa-stig-report-31-00-129.txt b/compute/public_sector/Release_Findings/v31_00_129/attachments/disa-stig-report-31-00-129.txt
@@ -0,0 +1,8 @@
+OpenSCAP and vulnerability scan report:
+Prisma Cloud Compute release: 31_00_129
+Base image: registry.access.redhat.com/ubi8/ubi-minimal:8.8
+Benchmark URL: scap-security-guide-0.1.69/ssg-rhel8-ds.xml
+Benchmark ID: xccdf_org.ssgproject.content_benchmark_RHEL-8
+Profile ID: xccdf_org.ssgproject.content_profile_stig
+Compared to IronBank's UBI8-minimal, Version 8.8, Build Date: 2023-05-03T15:02:09
+Env Host: 10.188.140.117