SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.36k stars 161 forks source link

Group membership incorrectly reflects deleted users #166

Closed initstring closed 2 years ago

initstring commented 2 years ago

Describe the bug

I recently deleted a handful of local user accounts. They belonged to various groups. Now, under "Access Management -> Groups", the "Users" column shows an incorrect number which I am assuming included the deleted users.

To Reproduce Steps to reproduce the behavior:

  1. Add a test user account
  2. Add that user to a user group
  3. Delete the user
  4. See that the number of users in that group does not go down, although they are no longer in the actual list

You end up in a situation where you can edit the group and count the list of users, and then see that count does not match what is reflected in the summary view.

Expected behavior

The number should decrement when a user is deleted.

Screenshots You can see here the tool reports 9 users in the group, but there are only 5 members in there when I go to edit it. 1 2 3

Desktop (please complete the following information):

doodleincode commented 2 years ago

Thanks for reporting this! Can confirm as a bug, we'll get it fixed in a future release.

carlvonderheid commented 2 years ago

Fixed in 8.5.1