search

mitre / vulcan

A web application to streamline the development of STIGs from SRGs
https://mitre-vulcan-prod.herokuapp.com/
Other
65 stars 16 forks source link

Copy Component corrupts SRG data when updating SRG version of the new SRG #515

Closed rlakey closed 1 year ago

rlakey commented 1 year ago

To reproduce: • Upload GPOS V2R1 and V2R4 or any like SRGs of different releases • Create component based on older SRG release • Run Copy Component workflow and select newer SRG • Export new component to csv. Controls that are not "Applicable - Configurable" will have cells "SRG VulDiscussion" and "SRG Check" be blank • Viewing the new component in the UI will also not display SRG data for the same controls

To repair: • Delete all components based on the newer SRG • Remove and reupload the newer SRG

rlakey commented 1 year ago

Screenshot of the UI when the SRG details are missing.

image