Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cloud Defender: Azure registry container images should have vulnerabilities resolved #1062

Open
kousei2040 opened this issue Apr 10, 2024 · 1 comment

Comments

@kousei2040
Copy link

kousei2040 commented Apr 10, 2024

Getting this in Cloud Defender but not able to resolve as it was not used in code

Using mcr.microsoft.com/azure-functions/python:4.33.1-python3.10

HIGH Vulnerability CVE-2017-0249 - system.net.security needs to be upgraded from 4.3.0.0 to 4.3.1
MEDIUM Vulnerability CVE-2018-8292 - system.net.http needs to be updated to 4.3.0.0 to 4.3.4
MEDIUM Vulnerability CVE-2017-0248 - system.net.security needs to be updated to 4.3.0.0 to 4.3.1
MEDIUM Vulnerability CVE-2017-0256 - system.net.security needs to be updated to 4.3.0.0 to 4.3.1

Container:
image

Repository:
image

For the used packages:
image

This is causing a block to our deployment due to this vulnerability picked up by Cloud Defender

@FinVamp1
Copy link
Member

I was not able to see these issues in my scan. Is there a docker file you can share or a Hash of the image fle?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants