So, I’m new to Nexpose and have a question about scanning RHEL 8.2 against a CIS benchmark. The CIS Red Hat Enterprise Linux Benchmark v1.0.1 is for 8.3. We are running 8.2 and I was told by someone on the CIS forum that the v1.0.1 benchmark could be used for 8.2, and the difference between v8.2 and 8.3 shouldn’t be as issue.
However, will this even be possible in Nexpose if the CPEs are different? Should I be able to scan 8.2 against a benchmark written for 8.3?
Thanks