Wiz Earns Red Hat Vulnerability Scanner Certification
Summary
Wiz says its certified scanner now uses Red Hat security feeds for Red Hat products, applies Red Hat-specific severity ratings, identifies available Red Hat patches, and omits vulnerabilities Red Hat deems not affected.
Key points
- Wiz says its vulnerability scan reports for Red Hat products meet Red Hat’s certification requirements.
- For Red Hat images and products, Wiz says it now sources vulnerabilities exclusively from Red Hat security feeds, including Red Hat OVAL v2 data.
- Findings receive Red Hat-specific severity information mapped to Wiz’s severity scale.
- Where available, scan results identify the Red Hat Security Advisory containing a patch for a CVE.
- Vulnerabilities Red Hat deems “Not affected” will not appear in CVE scan results, even if other vulnerability feeds flag the packages.
- Wiz says it will regularly exchange feedback and advisory updates with Red Hat Product Security.
Article Details
- Event Type
- Product certification
- Impact
- Wiz received Red Hat Vulnerability Scanning Certification. Wiz reports that it now sources vulnerability data for Red Hat container images and products from Red Hat security feeds, applies Red Hat-specific severity information, shows Red Hat patches when available, and omits CVEs Red Hat deems “Not affected.”
Vendors
Red HatThe Red Hat Vulnerability Scanning Certification is a collaboration with security partners to deliver more accurate and reliable vulnerability scanning results for Red Hat-published images and packages. Wiz’s focus onWizmore accurate and reliable vulnerability scanning results for Red Hat-published images and packages. Wiz’s focus on cloud-native risk includes our commitment to accurate and insightful vulnerability analysis on
Products
Red Hat OVAL v2 security data feed110k vulnerability across numerous operating systems. This includes the integration of the Red Hat OVAL v2 security data feed, which provides specific details about vulnerabilities affecting Red Hat-supportedWiz Vulnerability Catalogvulnerabilities sourced from Ubuntu or Red Hat package vulnerability streams. Supported by the Wiz Vulnerability Catalog, which ingests vulnerability streams from over 30 upstream open-source and proprietary feeds,Wiz Vulnerability engineto have worked in collaboration with the Security Engineering team at Red Hat to refine the Wiz Vulnerability engine to reliably and accurately identify vulnerabilities found on Red Hat official packages and