Cyber Risks · PortSwigger Research

Raising tickets automatically - Port Swigger

Summary: Burp Suite DAST now supports triggers that automatically raise ServiceNow tickets when a scan finds issues matching a trigger's severity, confidence and site settings, with each action able to hold several triggers. Burp Suite DAST raises at most one automatic ticket per issue, per connection, per ServiceNow table, and retries failed tickets with a delay that doubles up to once a day, while it does not retry tickets ServiceNow refuses.

What's compelling: A custom integration or business rule that rewrites the correlation_id field can produce duplicate tickets, and a refused ticket is not retried until the issue appears in a later scan.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related