Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

High Security Vulnerability when deploying ASKEE Single Node #2261

Closed
renato-marciano opened this issue Nov 10, 2023 · 2 comments
Closed

High Security Vulnerability when deploying ASKEE Single Node #2261

renato-marciano opened this issue Nov 10, 2023 · 2 comments
Assignees

Comments

@renato-marciano
Copy link

Is your issue related to a Jumpstart scenario, ArcBox, HCIBox, or Agora?
Single Node Deployment AKSEE

Describe the issue or the bug
There are security vulnerabilities when deploying AKSEE for the Single Node

To Reproduce

  1. Deploy AKS Edge Essentials Single Arm deployment using the jumpstart documentation.
  2. After deployment, go to your VM on Azure Portal
  3. There will be an advisor note, you can click.

Expected behavior
No high security vulnerabilities.

Screenshots
image

image

@renato-marciano renato-marciano added the triage issue or feature up for triage label Nov 10, 2023
Copy link

Hey friend! Thanks for opening this issue. We appreciate your contribution and welcome you to our community! We are glad to have you here and to have your input on the Azure Arc Jumpstart.

@likamrat likamrat self-assigned this Nov 20, 2023
@likamrat likamrat removed the triage issue or feature up for triage label Nov 20, 2023
@likamrat
Copy link
Contributor

Hi @renato-marciano thank you. a couple of things with regard to the issue.

  1. These are not security vulnerabilities, it is remediation recommendations.
  2. I would like to refer you to our Our mission and principles page. Please refer to the below disclaimer.

image

The VMs getting deployed in each scenario or solution are sandboxed VMs, and applying each VM remediation recommendation is out of scope for the Jumpstart, unless it serves the actual scenario or solution.

I will fo ahead and close this for now. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants