{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":46082,"path":"security-management/vulnerability-response/redhat-integration.md","title":"Red Hat Solution Integration","bundle":null,"doc_type":null,"release":"australia","body":"\n# Red Hat Solution Integration\n\nYou can review and implement proposed remediation solutions provided by the Red Hat Solution Integration in the Vulnerability Response application.\n\nRed Hat Solution Integration is included in the Vulnerability Solution Management feature of Vulnerability Response, available by separate subscription. See [Vulnerability Solution Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-solution-mgmt.md) for more information on how Vulnerability Response incorporates solutions.\n\nRed Hat Solution Integration investigates reports of security vulnerabilities affecting Red Hat products and services, and provides solution information to help manage security risks. Solutions known as remediations are imported into your Red Hat Solution Integration from Red Hat.\n\nStarting from version 21.0 of Vulnerability Response, Red Hat transmits payloads in the Common Security Advisory Framework \\(CSAF\\) format rather than the Common Vulnerability Reporting Framework \\(CVRF\\) format. CSAF, an XML-based standard, differs in both structure and format from CVRF. To accommodate this change, a new CSAF parser has been developed. This parser interprets the CSAF format, extracting the required fields to populate the tables accordingly.\n\n**Note:** By default, you will receive the payload in the CSAF format.\n\nThe following extracts show the integration script for parsing the payload received from Red Hat in the CSAF and CVRF formats respectively.\n\n```\n/** « This function serves to construct the integration script.\n\n*\tThe integration process record (integrationProcessGr) is provided in the event\n\n*\tThe function should return the newly constructed script. */\n(function(integrationProcessGr){\n\n// Add any logic here to construct your integration script as necessary.\n\n// Pass true if CSAF payload is expected. Pass false if CVRF payload is expected\nreturn new sn_vul.RedHatSolutionIntegration(true);\n})(integrationProcessGr);\n\n```\n\n```\n/** « This function serves to construct the integration script.\n\n*\tThe integration process record (integrationProcessGr) is provided in the event\n\n*\tThe function should return the newly constructed script. */\n(function(integrationProcessGr){\n\n// Add any logic here to construct your integration script as necessary.\n\n// Pass true if CSAF payload is expected. Pass false if CVRF payload is expected\nreturn new sn_vul.RedHatSolutionIntegration(false);\n})(integrationProcessGr);\n\n```\n\nRed Hat Solution Integration contains entry points to the Red Hat product, invoked as a scheduled job. The scheduled job simplifies the vulnerability remediation life cycle by keeping the instance synchronized with other vulnerability management systems. It runs automatically. You can also execute the scheduled job manually.\n\nThere is a configured run-as user for each integration record. The default value for this user is **VR.System**. Do not change this value.\n\n## Available versions\n\nFor the most current version of Vulnerability Solution Management and Red Hat solutions, verify you have the most current version of Vulnerability Response installed.\n\nFor more information about installing and configuring Vulnerability Solution Management and solution integrations, see [Install the Solution Management for Vulnerability Response application](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/install-and-configure-solution-mgmt.md) and [Configure installed solution integrations for Vulnerability Solution Management using Setup Assistant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr_SA_manage_supported_apps.md).\n\n<table id=\"AvailableVersions\"><thead><tr><th>\n\nRelease version of Vulnerability Response\n\n</th><th>\n\nVersion of Vulnerability Solution Management\n\n</th><th>\n\nRelease Notes\n\n</th></tr></thead><tbody><tr><td>\n\nVulnerability Response v15.0\n\n</td><td>\n\nv10.3\n\n</td><td>\n\nFor compatibility information, see [KB0856498 Vulnerability Response Compatibility Matrix and Release Schema Changes](https://support.servicenow.com/kb_view.do?sysparm_article=KB0856498)\n\n</td></tr></tbody>\n</table>## Roles\n\nRed Hat Solution Integration tasks involve the following role: sn\\_vul.configure\\_rhsa\\_integration\n\nPersona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see [Assign the Vulnerability Response persona roles using Setup Assistant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-assign-personas_SA.md). For more information about managing granular roles, see [Manage persona and granular roles for Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr_manage_granular-roles.md).\n\n## Red Hat Solution Integration\n\nTo view the Red Hat Solution Integration, navigate to **Vulnerability Response** &gt; **Administration** &gt; **Integrations**.\n\nThe following integration is included in the base system.\n\n<table id=\"table_sbn_qtp_dt\"><thead><tr><th>\n\nIntegration\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nRed Hat Solution Integration\n\n</td><td>\n\nRetrieves solutions and National Vulnerability Database \\(NVD\\) mapping to associate solutions with vulnerabilities, vulnerable items, and remediation tasks.\n\n</td></tr></tbody>\n</table>## Solutions\n\nTo view imported solutions in a list, see [View a solution](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/view-solutions.md).\n\n**Parent Topic:**[Vulnerability Solution Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-solution-mgmt.md)\n\n"}}