This page details how to manually map unmapped Findings in ThreadFix.
Introduction
Occasionally, you will upload a scan into ThreadFix and find that no Findings seem to have been uploaded into the system. Now, how can this be so when you know your scan file had vulnerabilities listed in it? It's because none of those vulnerabilities were able to be mapped to a CWE. In this scenario, you'll notice that you have a few items under the 'Unmapped Findings' tab on the Application detail page.
These are the Findings generated by ThreadFix that have yet to be mapped to a CWE ID.
Map Findings
The following functionality requires the user to have the ‘Manage Vulnerability Types’ permission at the global role level, since the CWE mapping needs to be applied to all vulnerabilities that have findings with the same scanner vulnerability type across your entire portfolio of teams/apps.
- Click 'Create Mapping'.
Either start typing in the CWE ID or CWE description that matches the Finding vulnerability type then submit.
- Notice how the finding now shows up under the Vulnerabilities tab.
- Continue mapping the remaining Findings until you have completed the list.
Remapping a Vulnerability is deprecated as of version 2.8.4.