[All] Remedy for False Positives in Vulnerability Report

Mon Jun 21 08:59:57 PDT 2021

Hello all,

I tried to send this out on Friday morning, but it turns out I did not send it to the “all espo” list properly, so hopefully I’ve got it right this time. Please don’t hesitate to reach out if you have questions.

Here are some step-by-step instructions to hopefully ease the process to remedy the issue wherein your machine is reporting false positives in the vulnerability reports we receive from security:

  1.  Verify you are signed into Enterprise Connect by hovering over the black key icon in the top-right corner to ensure you will be able to use your badge PIN to pass your admin credentials
[A screenshot of a computer  Description automatically generated with low confidence]
  2.  Open Terminal, which can either be found within your utilities folder in Applications or simply by searching for it using Spotlight (the magnifying glass in the top right corner/keyboard shortcut ⌘-Space) [cid:image002.png at 01D7667B.C7664D60]
  3.  Run the command by typing it in Terminal or copying/pasting it from below

sudo /Library/BESAgent/BESAgent.app/Contents/MacOS/BESAgentControlPanel.sh -restart

[Text  Description automatically generated]
  4.  When prompted, enter your admin credentials
[Text  Description automatically generated]
  5.  You should see a message confirming the process has restarted
[Text  Description automatically generated]

If you still require additional assistance or if something doesn’t seem to work right, please feel free to contact me and I’d be happy to schedule time to help you directly. 😊

Kind Regards,

Sam

From: "Stern, Katie (ARC-SGG)[Bay Area Environmental Research Institute]" <kathryn.stern at nasa.gov>
Date: Thursday, June 17, 2021 at 5:25 PM
To: "Kim, Samuel S. (ARC-SGG)[Bay Area Environmental Research Institute]" <samuel.s.kim at nasa.gov>, "Padhi, Ayuta (ARC-SGG)[Bay Area Environmental Research Institute]" <ayuta.padhi at nasa.gov>, "Bulger, Brad (ARC-SGG)[Bay Area Environmental Research Institute]" <bradford.bulger at nasa.gov>, "MURPHY, CAITLIN (ARC-SGG)[Bay Area Environmental Research Institute]" <caitlin.murphy at nasa.gov>, "Alfter, Judy (ARC-SGG)[Bay Area Environmental Research Institute]" <judy.alfter at nasa.gov>, "Ryan, Leslie (ARC-SGG)[Bay Area Environmental Research Institute]" <leslie.ryan at nasa.gov>, "Phothisane, Stevie (ARC-SGG)[Bay Area Environmental Research Institute]" <s.s.phothisane at nasa.gov>, "Mcfadden, Susan K. (ARC-SGG)[Bay Area Environmental Research Institute]" <susan.k.mcfadden at nasa.gov>, "Drdla, Katja (ARC-SGG)" <katja.drdla at nasa.gov>, "Justice, Erin (ARC-SGG)[Bay Area Environmental Research Institute]" <erin.justice at nasa.gov>, "Allison, Quincy D. (ARC-SGG)[Bay Area Environmental Research Institute]" <quincy.allison at nasa.gov>, "Vasques, Marilyn F. (ARC-SGG)" <marilyn.vasques at nasa.gov>, "Czech, Erin P. (ARC-SGG)" <erin.czech at nasa.gov>, "Nicholas, Sommer (ARC-SGG)[Bay Area Environmental Research Institute]" <sommer.nicholas at nasa.gov>
Subject: Re: Remedy for False Positives in Vulnerability Report

Hi Sam,

I think you might have overestimated my (and maybe other’s?) IT abilities 😊

Can you please provide a guide or visuals?

Thanks!
Katie

Katie Stern (she/her)
Deputy Project Manager - Earth Science Project Office
NASA Ames Research Center
MS 232-22
Moffett Field, CA 94035

Cell: 650-440-8749
Work: 650-604-5965
Email: Kathryn.Stern at nasa.gov

From: "Kim, Samuel S. (ARC-SGG)[Bay Area Environmental Research Institute]" <samuel.s.kim at nasa.gov>
Date: Thursday, June 17, 2021 at 12:30 PM
To: "Padhi, Ayuta (ARC-SGG)[Bay Area Environmental Research Institute]" <ayuta.padhi at nasa.gov>, "Bulger, Brad (ARC-SGG)[Bay Area Environmental Research Institute]" <bradford.bulger at nasa.gov>, "MURPHY, CAITLIN (ARC-SGG)[Bay Area Environmental Research Institute]" <caitlin.murphy at nasa.gov>, "Alfter, Judy (ARC-SGG)[Bay Area Environmental Research Institute]" <judy.alfter at nasa.gov>, "Ryan, Leslie (ARC-SGG)[Bay Area Environmental Research Institute]" <leslie.ryan at nasa.gov>, "Phothisane, Stevie (ARC-SGG)[Bay Area Environmental Research Institute]" <s.s.phothisane at nasa.gov>, "Mcfadden, Susan K. (ARC-SGG)[Bay Area Environmental Research Institute]" <susan.k.mcfadden at nasa.gov>, "Stern, Katie (ARC-SGG)[Bay Area Environmental Research Institute]" <kathryn.stern at nasa.gov>, "Drdla, Katja (ARC-SGG)" <katja.drdla at nasa.gov>, "Justice, Erin (ARC-SGG)[Bay Area Environmental Research Institute]" <erin.justice at nasa.gov>, "Allison, Quincy D. (ARC-SGG)[Bay Area Environmental Research Institute]" <quincy.allison at nasa.gov>, "Vasques, Marilyn F. (ARC-SGG)" <marilyn.vasques at nasa.gov>, "Czech, Erin P. (ARC-SGG)" <erin.czech at nasa.gov>, "Nicholas, Sommer (ARC-SGG)[Bay Area Environmental Research Institute]" <sommer.nicholas at nasa.gov>
Subject: Remedy for False Positives in Vulnerability Report

Hello all,

This email is to provide a workaround solution to an issue wherein your machine was reporting a vulnerability that you had likely already taken care of; namely Chrome, Firefox, and Adobe Reader have been causing issues. This occurred due to a discrepancy in BigFix’s inventory not being accurately reflected in the vulnerability report. It is my hope that this command will help me to avoid nagging you for something you’ve already done; unfortunately, however, we still do not know if this will be something we need to run regularly, but as soon as I have more information on that, I’ll pass it along.

When you have a moment, please run the following command in terminal:

sudo /Library/BESAgent/BESAgent.app/Contents/MacOS/BESAgentControlPanel.sh -restart

This command will restart the BigFix client on your computer which will then update the inventory/vulnerabilities on which the reports are generated. As this command needs to be run with sudo access, you will need to provide your admin credentials. If you need additional assistance or have questions, feel free to reach out and I’ll be happy to help as best I can.

Kind Regards,

Sam Kim
-----------------------------------------------
System Administrator
Earth Science Project Office (ESPO)
NASA Ames Research Center
Bay Area Environmental Research Institute (BAERI)
Cell: 650.935.0840
Email: samuel.s.kim at nasa.gov<mailto:samuel.s.kim at nasa.gov>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://espo.nasa.gov/pipermail/all/attachments/20210621/010f1998/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 168727 bytes
Desc: image001.png
URL: <http://espo.nasa.gov/pipermail/all/attachments/20210621/010f1998/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 853521 bytes
Desc: image002.png
URL: <http://espo.nasa.gov/pipermail/all/attachments/20210621/010f1998/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 116924 bytes
Desc: image003.png
URL: <http://espo.nasa.gov/pipermail/all/attachments/20210621/010f1998/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 153740 bytes
Desc: image004.png
URL: <http://espo.nasa.gov/pipermail/all/attachments/20210621/010f1998/attachment-0008.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 179851 bytes
Desc: image005.png
URL: <http://espo.nasa.gov/pipermail/all/attachments/20210621/010f1998/attachment-0009.png>