Register Issues

Issues are security breaches found in the targeted systems during penetration testing and registered by pentesters as tickets in the Platform.

To create Issue, perform one of the following steps:

  1. In Project data:
    • Single click on the Object (IP, Host, Port) and in the appeared sidebar click Create Issue:
    • Right mouse click on the Object (IP, Host, Port) and in the drop-down menu select option Create > Issue:

or 1. In Issues tab click Create Issue:

  1. Select issue template or fill in the fields to create a new Issue:

Note: when selecting a template, some fields will be filled automatically.

  • Issue title — name of the detected Issue;
  • Score — total risk of the vulnerability calculated upon Probability and Criticality of the Issue;
  • Criticality — the risk level of the vulnerability (Low, Medium, High);
  • Probability — the possibility of exploiting a vulnerability (Low, Medium, High);
  • Affected Assets — IP address or Hostname of the system with Issue (optional);
  • General description — common description of the Issue;
  • Risk description — description of the Issue risk;
  • Technical description — technical description of the issue;
  • HTTP request — example of the site requests and responses;
  • Recommendations — recommendations for issue remediation;
  • Steps to reproduce — actions to reproduce the Issue.

Notes:

  • by default, you can upload Images in the following formats: .jpg, .png, .jpeg, .gif and file size is up to 100 MB (contact system administrator to change this parameter);
  • when you fill the at least 5 fields, Issue status changes from Draft to Ready.

Click Save Changes to register the Issue. A new issue appears in the Project data tab next to the corresponding Object (IP, Host, Port) and the Issues tab.

When registering an issue, you can save it as a template. To do it, in editor enable option Create template from issue:

Create reports and export issues

To create a report by Issues:

  1. In the Issues tab click Generate report;
  2. In the drop-down menu select report template and click Generate report.

Notes: the report will be downloaded in .DOCX format.

To export Issues to Apiary:

  1. Make sure that your project is connected to Apiary project;
  2. Click Send Issues. Issues will be automatically sent to Apiary.

Notes: 1. Issues can be sent only to Apiary. They can't be sent back from Apiary to Hive. 1. Send Issues with only the Ready status.

Issue templates

There are several predefined issue templates on the Platform, which you can use for registering issues. All issue templates are stored at the Platform Knowledge base. To view issue templates, go to Issues > Templates tab.

Note: you cannot delete predefined issue templates.

To create an issue template:

  1. Go to the Issues > Templates;
  2. Click Create template;
  3. Fill all fields and click Save changes. New template appears in the Templates list.

To manage the issue template, right mouse click on the template and select one of the options:

  • Edit — template editing;
  • Info — template information;
  • Delete — removal of template;
  • Create Issue — registration of the Issue by the template.

To export issue template:

  1. Go to the Issues > Templates;
  2. Click Export;
  3. In Export template window select a needed template;

  4. Enter the file name and click Export. You will get archive with two files in .json format:

    • manifest.json — common information about template;
    • data.json — issue template.

To import issue template:

  1. Create files manifest.json and data.json according to the following .json format;
  2. Save both files into the archive;
  3. Go to the Issues > Templates;
  4. Click Import. A new issue template appears in the list.

See also