#303 Assign Nessus Findings to S1-2 (CCI-001237)

[JeffOdegard]

The Nessus vulnerability findings in the Orphans tabs are assigned to AC-1.3, not SI-2. They need to be assigned to the correct one (CCI-001237 (SI-2)). We might need to look at some going to CM-6 (CCI-000366), since they are really configuration items and not patches. We can discuss. This applies to vulnerability scan findings, not compliance scan findings.

[JeffOdegard]

Since we are no longer exporting the Orphan checklist, this is kind of OBE (for now.) One possible solution, in parse_nessus.php, line 999:

    if (preg_match("/CCI\|([^\,]+)/", $data, $match)) {
        $this->plugin->result->cci = $match[1];
    } else {
	# The default should be SI-2
	$this->plugin->result->cci = "001237";
}