# CentOS and OVAL definitions

**URL:** <https://discuss.rapid7.com/t/centos-and-oval-definitions/10559>\
**Category:** InsightVM\
**Tags:** InsightVM\
**Created:** [March 4, 2022, 1:05pm UTC](https://discuss.rapid7.com/t/centos-and-oval-definitions/10559 "2022-03-04T13:05:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jdavis](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/j/f6c823/32.png) [@jdavis](https://discuss.rapid7.com/u/jdavis)\
**Post date:** [March 4, 2022, 1:05pm UTC](https://discuss.rapid7.com/t/centos-and-oval-definitions/10559/1 "2022-03-04T13:05:40Z")

</div>

Should I be expecting the Redhat OVAL data that InsightVM ingests to be helping with accurate identification of vulnerabilities on CentOS systems?

I’ve been working with one of our sysadmins and we came across a system where the authenticated scan is listing a CentOS system as vulnerable to CVE-2021-44790, yet the updated package that addresses that issue (RHSA-2021:0860) is very much installed.

---

<div class="post-metadata">

**Author:** ![brandon\_mcclure](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/brandon_mcclure/32/182_2.png) [@brandon\_mcclure](https://discuss.rapid7.com/u/brandon_mcclure)\
**Post date:** [March 4, 2022, 2:41pm UTC](https://discuss.rapid7.com/t/centos-and-oval-definitions/10559/2 "2022-03-04T14:41:27Z")

</div>

Check your permissions on the authenticated scan. We saw something similar with some RHEL boxes and the proof said no patches found, we corrected the permissions and it found them.  
[https://docs.rapid7.com/insightvm/authentication-on-unix-and-related-targets-best-practices/](https://docs.rapid7.com/insightvm/authentication-on-unix-and-related-targets-best-practices/)