Modify Risk

Nodeware allow you to modify the risk level of one or more vulnerabilities directly within the dashboard. This feature is designed to helps you align vulnerability severity with your organization's actual risk—whether a vulnerability is already mitigated, doesn’t apply to your environment, or intentionally accepted.

The modifications are reflected (not included) in the calculation of the asset score. 

The Exceptions Report details all user created exceptions including:

• Vulnerability modifications (Accepted Risk, False Positive, Compensating Control)
• OS overrides
• Decommissioned assets

To modify the risk for a single asset, do the following:

1.    Log into the Nodeware Dashboard at https://app.nodeware.com.
2.    Navigate to the Customer’s dashboard.
3.    Click Assets.
4.    Click the asset with the vulnerability.
5.    Modify the risk either by:

a. clicking the vulnerability to access the vulnerability details and click Modify

On the Risk Modification screen, select the Modification Type and Expiration. Then, enter a reason for the exception. 

b. clicking the CVE icon to open the Detailed CVE View

The Detailed CVE View appears.

Select device, click Modify Risk, and enter the Modification Type, Expiration, reason for the exception, and select Selected Assets in the Apply to field.

To modify risk for multiple assets, do the following:

1.    Navigate to the Customer’s dashboard.
2.    Click Assets.
3.    Click the CVE icon to open the Detailed CVE View.

The Detailed CVE View appears.

4.    Select multiple devices and click Modify Risk.
5.    Enter the Modification Type, Expiration, reason for the exception, and select Selected Assets in the Apply to field.
 

Once the risk has been modified:
•    The vulnerability will now display an updated risk tag
•    The modifications are recorded and are viewable in the Exceptions Report
•    Alerts will be suppressed if the CVE is no longer considered critical or high
 

To remove the modification, do the following:

1.    Navigate to the asset where the vulnerability is located.
2.    Click the Modified vulnerability.

3.    Click Modified and then Remove.