Lucene search
+L

CPE-based Policy Check Error

🗓️ 20 Nov 2017 00:00:00Reported by Copyright (C) 2017 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 12 Views

CPE-based Policy Check Error, invalid CPE synta

Code
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.108291");
  script_version("2023-09-07T05:05:21+0000");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"last_modification", value:"2023-09-07 05:05:21 +0000 (Thu, 07 Sep 2023)");
  script_tag(name:"creation_date", value:"2017-11-20 11:42:20 +0100 (Mon, 20 Nov 2017)");
  script_name("CPE-based Policy Check Error");
  # nb: Needs to be in ACT_END because cpe_inventory.nasl is also there
  script_category(ACT_END);
  script_family("Policy");
  script_copyright("Copyright (C) 2017 Greenbone AG");
  script_dependencies("Policy/gb_policy_cpe.nasl", "compliance_tests.nasl");
  script_mandatory_keys("policy/cpe/invalid_line/found");

  script_tag(name:"summary", value:"Shows all CPEs from the CPE-based Policy Check which have an
  invalid syntax.");

  script_tag(name:"qod_type", value:"remote_banner");

  exit(0);
}

include("policy_functions.inc");

invalid_lines = get_kb_list("policy/cpe/invalid_list");

if (invalid_lines) {

  # Sort to not report changes on delta reports if just the order is different
  invalid_lines = sort(invalid_lines);

  report += 'The following invalid lines were identified within the uploaded/provided CPEs:\n\n';

  foreach error(invalid_lines) {
    report += error + '\n';
  }
}

if (strlen(report) > 0) {
  # nb: If the Test should run as Policy, then report in Policy format
  if (get_kb_item("Compliance/verbose")) {
    default = "N/A";
    compliant = "incomplete";
    fixtext = "Fix the lines reported and rerun the scan.";
    type = "CPE Check";
    test = "Check if the provided information has a valid format.";
    info = ""; # nb: to make linter happy

    policy_reporting(result:report, default:default, compliant:compliant, fixtext:fixtext, type:type,
                     test:test, info:info);
  } else {
    log_message(port:0, data:report);
  }
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Sep 2023 00:00Current
7.3High risk
Vulners AI Score7.3
12