arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ext: pass through CVSSv3 impact and exploitability score

Browse Source
This commit is contained in:
Kate Murphy 2018-10-19 10:44:23 -04:00
parent 8efc3e4038
commit 4f0da12b12
No known key found for this signature in database
GPG Key ID: DE24040826F4BD73
3 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ext/vulnmdsrc/nvd/json.go
View File

@ -59,7 +59,9 @@ type nvdCVSSv2 struct {
} }
type nvdBaseMetricV3 struct { type nvdBaseMetricV3 struct {
CVSSv3 nvdCVSSv3 `json:"cvssV3"` CVSSv3 nvdCVSSv3 `json:"cvssV3"`
ExploitabilityScore float64 `json:"exploitabilityScore"`
ImpactScore float64 `json:"impactScore"`
} }
type nvdCVSSv3 struct { type nvdCVSSv3 struct {
@ -123,8 +125,10 @@ func (n nvdEntry) Metadata() *NVDMetadata {
Score: n.Impact.BaseMetricV2.CVSSv2.Score, Score: n.Impact.BaseMetricV2.CVSSv2.Score,
}, },
CVSSv3: NVDmetadataCVSSv3{ CVSSv3: NVDmetadataCVSSv3{
Vectors: n.Impact.BaseMetricV3.CVSSv3.String(), Vectors: n.Impact.BaseMetricV3.CVSSv3.String(),
Score: n.Impact.BaseMetricV3.CVSSv3.Score, Score: n.Impact.BaseMetricV3.CVSSv3.Score,
ExploitabilityScore: n.Impact.BaseMetricV3.ExploitabilityScore,
ImpactScore: n.Impact.BaseMetricV3.ImpactScore,
}, },
} }

6
ext/vulnmdsrc/nvd/nvd.go
View File

@ -65,8 +65,10 @@ type NVDmetadataCVSSv2 struct {
} }
type NVDmetadataCVSSv3 struct { type NVDmetadataCVSSv3 struct {
Vectors string Vectors string
Score float64 Score float64
ExploitabilityScore float64
ImpactScore float64
} }
func init() { func init() {

6
ext/vulnmdsrc/nvd/nvd_test.go
View File

@ -69,8 +69,10 @@ func TestNVDParser(t *testing.T) {
Score: 7.5, Score: 7.5,
}, },
CVSSv3: NVDmetadataCVSSv3{ CVSSv3: NVDmetadataCVSSv3{
Vectors: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", Vectors: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
Score: 9.8, Score: 9.8,
ExploitabilityScore: 3.9,
ImpactScore: 5.9,
}, },
} }
assert.Equal(t, wantMetadata, gotMetadata) assert.Equal(t, wantMetadata, gotMetadata)