Vulnerability Scanning on Ubuntu 22.04 Jammy

[Steven Paugh]

Hello team,

Working on getting vuln scanning working for Ubuntu 22.04 and running into issues where I can't seem to get it to scan.

So far I have done the following:

1. Added <os>jammy</os> to the manager(s) ossec.conf under the vulnerability scanning section

2. Checked to make sure syscolelctor woodle was turned on:

  <!-- System inventory -->
  <wodle name="syscollector">
    <disabled>no</disabled>
    <interval>1h</interval>
    <scan_on_start>yes</scan_on_start>
    <hardware>yes</hardware>
    <os>yes</os>
    <hotfixes>yes</hotfixes>
    <network>yes</network>
    <packages>yes</packages>
    <ports all="no">yes</ports>
    <processes>yes</processes>

3. Restarted services multiple times on both managers and agent

4. Verified system inventory is showing correctly

Is there something I am missing here? I'm unfortunately all out of ideas! Thank you in advance for any help that can be offered.

-Steven

[Abdullah Al Noman]

Hi Steven,

Thank you for using Wazuh.

You have to configure <vulnerability-detector> module in Wazuh server properly to get the vulnerability scan results. Follow this Configuring and running vulnerability scans guide that will walk you through the configuration process.

Looking forward to your update.

Kind regards,