Outage in Qualys

All Platforms : Users' Perl scripts failing on limited Red Hat Enterprise Linux systems (IM-11912)

Resolved Major
January 29, 2025 - Started 25 days ago - Lasted 13 minutes
Official incident page

Need to monitor Qualys outages?
Stay on top of outages with IsDown. Monitor the official status pages of all your vendors, SaaS, and tools, including Qualys, and never miss an outage again.
Start Free Trial

Outage Details

Qualys Cloud Platform Operations has found and fixed a problem that caused users' Perl scripts to fail after running Vulnerability Management (VM) scans with the VULNSIGS-VM-2.6.245.2-2 manifest version on specific Red Hat Enterprise Linux systems using Qualys Cloud Agents. Qualys Cloud Agent is fully functional and has no impact on its workflow. It was found that if CPAN is not configured correctly or "cpan -l" invoked for the first time, it can create subdirectories such as /usr/local/share/perl5, /usr/local/lib/perl5, and /usr/local/lib64/perl5, which are standard directories used by CPAN. This problem primarily affected Red Hat Enterprise Linux systems but did not occur on all RHEL machines; the reason for this inconsistency is currently under investigation by Qualys in collaboration with CPAN. The directories were created with root ownership, preventing the successful execution of Perl scripts run with non-root privileges. The Qualys research team has removed the problematic command and released a new manifest version VULNSIGS-VM-2.6.245.3-3. To determine if you were affected: 1. Check for the existence of these directories: [ -d /usr/local/lib64/perl5 ] && ls -ld /usr/local/lib64/perl5 [ -d /usr/local/share/perl5 ] && ls -ld /usr/local/share/perl5 2. If found, verify their permissions: stat -c "%a %n" /usr/local/lib64/perl5 /usr/local/share/perl5 3. If permissions are set to 600, change them to 755 to allow access for non-root users: chmod 755 /usr/local/lib64/perl5 /usr/local/share/perl5 If you have any affected assets, please follow the above steps OR Qualys Technical Support Team can assist in sharing and executing the script for the above step.
Latest Updates ( sorted recent to last )
RESOLVED 25 days ago - at 01/29/2025 07:43AM

This incident has been resolved.

MONITORING 25 days ago - at 01/29/2025 07:33AM

Qualys Cloud Platform Operations has found and fixed a problem that caused users' Perl scripts to fail after running Vulnerability Management (VM) scans with the VULNSIGS-VM-2.6.245.2-2 manifest version on specific Red Hat Enterprise Linux systems using Qualys Cloud Agents. Qualys Cloud Agent is fully functional and has no impact on its workflow.

It was found that if CPAN is not configured correctly or "cpan -l" invoked for the first time, it can create subdirectories such as /usr/local/share/perl5, /usr/local/lib/perl5, and /usr/local/lib64/perl5, which are standard directories used by CPAN. This problem primarily affected Red Hat Enterprise Linux systems but did not occur on all RHEL machines; the reason for this inconsistency is currently under investigation by Qualys in collaboration with CPAN. The directories were created with root ownership, preventing the successful execution of Perl scripts run with non-root privileges.

The Qualys research team has removed the problematic command and released a new manifest version VULNSIGS-VM-2.6.245.3-3.
To determine if you were affected:
1. Check for the existence of these directories:
[ -d /usr/local/lib64/perl5 ] && ls -ld /usr/local/lib64/perl5
[ -d /usr/local/share/perl5 ] && ls -ld /usr/local/share/perl5

2. If found, verify their permissions:
stat -c "%a %n" /usr/local/lib64/perl5 /usr/local/share/perl5

3. If permissions are set to 600, change them to 755 to allow access for non-root users:
chmod 755 /usr/local/lib64/perl5 /usr/local/share/perl5

If you have any affected assets, please follow the above steps OR Qualys Technical Support Team can assist in sharing and executing the script for the above step.

Rely on a lot of vendors? We make monitoring them easy

With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.

Start free trial

No credit card required · Cancel anytime · 3746 services available

Integrations with Slack Microsoft Teams Google Chat Datadog PagerDuty Zapier Discord Webhook