Failed test cause of missing_affected_alert in Vulnerability Detection E2E tests

[joaquinsgi]

Target version	Related issue	Related PR/dev branch
4.9.0 RC 1	wazuh/wazuh#25080	4.9.0 beta 1

Description

Analyzing the build: https://ci.wazuh.info/job/Test_e2e_system/342/ of the issue: wazuh/wazuh#25080, an error has been found in test_change_agent_manager[install_package] , which appears to be too too many missing vulnerabilities, this behavior has been reported before in: #5658, but in missing_affected_alert we can see that one vulnerability alert in agent2 that was expected to be generated but is missing.

We can se in the log of the report:

AssertionError: 
E         Test test_change_agent_manager[install_package] failed
E         
E         Check no_errors succeeded
E         Check operation_successfull_for_all_agents succeeded
E         Check expected_vulnerabilities_found_in_index failed. Evidences (['missing_vulnerabilities']) can be found in the report.
E         Check no_unexpected_vulnerabilities_found_in_index succeeded
E         Check expected_vulnerability_affected_alert failed. Evidences (['missing_affected_alerts']) can be found in the report.
E         Check expected_vulnerability_mitigated_alert succeeded
E         Check no_duplicated_vulnerabilities succeeded

In missing_affected_alert

{
    "agent2": [
        [
            "CVE-2022-0778",
            "Node.js",
            "17.0.1",
            "x86_64"
        ]
    ]
}

Proposed checks

• Investigate why that alert was not generated.

Configuration and considerations

Full report:
Test_e2e_system_342_test_vulnerability_detector.zip

Expected results

The alert must be generated correctly.

Related

wazuh/wazuh#25080
wazuh/wazuh#24809

[jnasselle]

Update

We presume that this issue is related to the following analysis #5655 (comment)

[juliamagan]

This is a known issue: wazuh/wazuh#23192
It will be worked in https://github.com/wazuh/intelligence-platform/issues/1467

[MARCOSD4]

LGTM

[rauldpm]

To be fixed in https://github.com/wazuh/wazuh-qa-automation/issues/423