arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ext: pass through CVSSv3 impact and exploitability score

Browse Source
This commit is contained in:
Kate Murphy 2018-10-19 10:44:23 -04:00
parent 8efc3e4038
commit 4f0da12b12
No known key found for this signature in database
GPG Key ID: DE24040826F4BD73
3 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ext/vulnmdsrc/nvd/json.go
View File

@ -60,6 +60,8 @@ type nvdCVSSv2 struct {
type nvdBaseMetricV3 struct { type nvdBaseMetricV3 struct {
CVSSv3 nvdCVSSv3 `json:"cvssV3"` CVSSv3 nvdCVSSv3 `json:"cvssV3"`
ExploitabilityScore float64 `json:"exploitabilityScore"`
ImpactScore float64 `json:"impactScore"`
} }
type nvdCVSSv3 struct { type nvdCVSSv3 struct {
@ -125,6 +127,8 @@ func (n nvdEntry) Metadata() *NVDMetadata {
CVSSv3: NVDmetadataCVSSv3{ CVSSv3: NVDmetadataCVSSv3{
Vectors: n.Impact.BaseMetricV3.CVSSv3.String(), Vectors: n.Impact.BaseMetricV3.CVSSv3.String(),
Score: n.Impact.BaseMetricV3.CVSSv3.Score, Score: n.Impact.BaseMetricV3.CVSSv3.Score,
ExploitabilityScore: n.Impact.BaseMetricV3.ExploitabilityScore,
ImpactScore: n.Impact.BaseMetricV3.ImpactScore,
}, },
} }

2
ext/vulnmdsrc/nvd/nvd.go
View File

@ -67,6 +67,8 @@ type NVDmetadataCVSSv2 struct {
type NVDmetadataCVSSv3 struct { type NVDmetadataCVSSv3 struct {
Vectors string Vectors string
Score float64 Score float64
ExploitabilityScore float64
ImpactScore float64
} }
func init() { func init() {

2
ext/vulnmdsrc/nvd/nvd_test.go
View File

@ -71,6 +71,8 @@ func TestNVDParser(t *testing.T) {
CVSSv3: NVDmetadataCVSSv3{ CVSSv3: NVDmetadataCVSSv3{
Vectors: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", Vectors: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
Score: 9.8, Score: 9.8,
ExploitabilityScore: 3.9,
ImpactScore: 5.9,
}, },
} }
assert.Equal(t, wantMetadata, gotMetadata) assert.Equal(t, wantMetadata, gotMetadata)