Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cve_manager is not importing all CPEs for current CVEs #9

Open
axel-sch opened this issue Jun 11, 2021 · 0 comments
Open

cve_manager is not importing all CPEs for current CVEs #9

axel-sch opened this issue Jun 11, 2021 · 0 comments

Comments

@axel-sch
Copy link

It was observed that the import of CPEs is done only partially in CVE manager. Important CPEs for OS are mostly missing.
The JSON ZIP file from are correclty download and also those JSON files have the CVEs with the correct CPEs assigned. But the import function of CVE Manager does not import all CPEs.

Following example CPEs are affected:

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

Those example CVE's doesn't have a CPE link to the above list (just a cut-out):

axel-sch pushed a commit to axel-sch/cve_manager that referenced this issue Jun 17, 2021
CPE from node was not imported if child CPE's had been defined. Now CPE(s) from node AND child are imported.
Removed also redundant import implementation of node CPE(s).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant