Unsupported Software - 3rd Party Applications

I am wondering how the community handles software in use that is not being patched because it isn’t supported, the three ways I was advised of to identify them were:

• Open a device details page and check if you see a value in latest version
• Check the software page and see if a patch is available for a product
• Reference the supported software page: https://docs.automox.com/home/software/third-party-software

Unfortunately, none of these options provide me with an efficient means to get visibility to all unsupported (potentially unpatched) software currently in use. This could leave an endpoint vulnerable.

My deployment is small and it is already a challenge, so I am assuming that there is a way to monitor this that I am not currently aware of.

Any recommendations?

There is also a field/attribute in the API response for GetSoftware called is_managed, meaning is managed by Automox. There is a solution that will be implemented in the next month or 2 that will allow you to filter on this field in search from the UI. Currently you would have to do an API request and filter in the result:
Supported

        "id": 256314695,
        "server_id": 1499327,
        "package_id": 2095370,
        "software_id": 6187,
        "installed": true,
        "ignored": false,
        "deferred_until": null,
        "name": "org.mozilla.firefox",
        "display_name": "Firefox",
        "version": "67.0.4",
        "repo": "Mozilla",
        "group_ignored": false,
        "group_deferred_until": null,
        "cves": null,
        "cve_score": null,
        "severity": null,
        "package_version_id": 3833079,
        "os_name": "OS X",
        "os_version": "10.15.2",
        "create_time": "2020-01-15T18:34:10+0000",
        "requires_reboot": false,
        "patch_classification_category_id": null,
        "patch_scope": null,
        "is_uninstallable": false,
        "secondary_id": null,
        "is_managed": true,
        "impact": null,
        "organization_id": 1456,
        "agent_severity": null
    }

Unsupported

{
        "id": 256314809,
        "server_id": 1499327,
        "package_id": 2100235,
        "software_id": 16934,
        "installed": false,
        "ignored": false,
        "deferred_until": null,
        "name": "com.Adobe.PhotoshopCC",
        "display_name": "Adobe Photoshop CC 2019",
        "version": "20.0.7",
        "repo": "Adobe",
        "group_ignored": false,
        "group_deferred_until": null,
        "cves": null,
        "cve_score": null,
        "severity": null,
        "package_version_id": 3863634,
        "os_name": "OS X",
        "os_version": "10.15.2",
        "create_time": "2020-02-03T07:42:26+0000",
        "requires_reboot": false,
        "patch_classification_category_id": null,
        "patch_scope": null,
        "is_uninstallable": false,
        "secondary_id": null,
        "is_managed": false,
        "impact": null,
        "organization_id": 1456,
        "agent_severity": null
    }

The link for this API request is here: https://docs.automox.com/api/endpoints/list-software-packages-for-a-device

1 Like

Thank you for the response. I am trying to execute the API request from the link you had provided and the script appears to run; but I do not know where the output is going?

Pretty sure I am doing something wrong as I am not a programmer, any advice?

How are you running the API calls? You’ll typically need to either put the API call in some code which then receives the return info that you can then manipulate and report on. Or you can use some software designed to test and design your API calls, such as Postman. I have a quick guide on how to set that up if you haven’t done it before: