Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Active CVE evaluation bug #650

Open
rand0muser123 opened this issue Aug 26, 2024 · 0 comments
Open

Active CVE evaluation bug #650

rand0muser123 opened this issue Aug 26, 2024 · 0 comments

Comments

@rand0muser123
Copy link

Test case : Manual command line trigger to emulate OS 14.1.2 with disableNudgeForStandardInstalls set to true

Current behaviour: In the logs I can see that it is assessing macOS version range for active exploits
It then evaluates no known CVEs for 14.6.1 and acknowledge that disable NudgeForStandardInstalls is set to true
It then terminates

Expected behaviour:
In the logs I was expecting to see SOFA Actively Exploited CVEs: true and for Nudge to launch since there are CVEs in between and we have initiated the minorversionrecalculationthreshold - 15

Nudge Version: V2.0.10
Tested OS version - 14.1.2
Required OS version - latest-minor

Config

<key>optionalFeatures</key>
               <dict>
                   <key>acceptableApplicationBundleIDs</key>
                   <array/>
                   <key>acceptableAssertionApplicationNames</key>
                   <array/>
                   <key>acceptableAssertionUsage</key>
                   <false/>
                   <key>acceptableCameraUsage</key>
                   <false/>
                   <key>acceptableScreenSharingUsage</key>
                   <false/>
                   <key>aggressiveUserExperience</key>
                   <true/>
                   <key>aggressiveUserFullScreenExperience</key>
                   <true/>
                   <key>asynchronousSoftwareUpdate</key>
                   <true/>
                   <key>attemptToBlockApplicationLaunches</key>
                   <false/>
                   <key>attemptToFetchMajorUpgrade</key>
                   <true/>
                   <key>blockedApplicationBundleIDs</key>
                   <array/>
                   <key>utilizeSOFAFeed</key>
                   <true/>
                   <key>disableNudgeForStandardInstalls</key>
                   <true/>
                   <key>enforceMinorUpdates</key>
                   <true/>
                   <key>terminateApplicationsOnLaunch</key>
                   <false/>
               </dict> 
               <key>osVersionRequirements</key>
               <array>
                   <dict>
                       <key>aboutUpdateURL</key>
                       <string>https://apple.com</string>
                       <key>activelyExploitedCVEsMajorUpgradeSLA</key>
                       <integer>14</integer>
                       <key>activelyExploitedCVEsMinorUpdateSLA</key>
                       <integer>14</integer>
                       <key>nonActivelyExploitedCVEsMajorUpgradeSLA</key>
                       <integer>21</integer>
                       <key>nonActivelyExploitedCVEsMinorUpdateSLA</key>
                       <integer>21</integer>
                       <key>standardMajorUpgradeSLA</key>
                       <integer>28</integer>
                       <key>standardMinorupdateSLA</key>
                       <integer>28</integer>
                       <key>minorVersionRecalculationThreshold</key>
                       <integer>15</integer>
                       <key>majorUpgradeAppPath</key>
                       <string>/System/Library/PreferencePanes/Softwareupdate.prefpane</string>
                       <key>requiredMinimumOSVersion</key>
                       <string>latest-minor</string>
                       <key>targetedOSVersionsRule</key>
                       <string>default</string>
                   </dict>
               </array>
@macadmins macadmins deleted a comment Aug 26, 2024
@macadmins macadmins deleted a comment Aug 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant