fleet/docs/Contributing/architecture/software/vulnerability-management.md

1.8 KiB

Vulnerability management architecture

This document provides an overview of Fleet's vulnerability management architecture.

Introduction

Vulnerability management in Fleet identifies and manages software vulnerabilities in the device fleet. This document provides insights into the design decisions, system components, and interactions specific to the Vulnerability management functionality.

Architecture overview

The Vulnerability management architecture enables the identification, tracking, and remediation of software vulnerabilities across a fleet of devices. It compares installed software versions with known vulnerabilities and provides information about affected devices.

To learn more, read our vulnerability processing, software filtering, and remediating the xz vulnerability with Fleet.

Key components

Architecture diagram

[Placeholder for Vulnerability Management Architecture Diagram]

Vulnerability identification flow

Vulnerability data sources

Vulnerability scoring

Vulnerability remediation

Integration with external systems