Issue with the vulnerability logs.

Jafar_Hussain — Tue, 26 Oct 2021 13:38:59 GMT

We have noticed some vulnerability logs in our PA for the Telerik application in our environment.

the threat vault id is 59014 but according to the link. https://threatvault.paloaltonetworks.com/?query=59014).

https://www.telerik.com/support/kb/aspnet-ajax/details/allows-javascriptserializer-deserialization

To fix this vulnerability we need to upgrade the Telerik version 2020.1.114 but my current version is more than this 2020.3.915 it means this is non-vulnerable.

The issue is that I am getting vulnerability logs continuously. however, this is already fixed according to the PA KB.

can anyone guide me, what is the solution for this?

please note that I don't want to enable the exception for this thread id 59014.

Re: Issue with the vulnerability logs.

BPry — Wed, 27 Oct 2021 01:22:59 GMT

@Jafar_Hussain,

You could reach out to TAC and let them know that this threat-id signature may be a false positive, but keep in mind that just because the vulnerability isn't applicable to your environment doesn't mean that you can't see exploit attempts. Are you sure that what you are seeing is actually a false positive and not someone actively trying to exploit the vulnerability that you may already have patched?

topic Issue with the vulnerability logs. in General Topics

Issue with the vulnerability logs.

Re: Issue with the vulnerability logs.