Cyberdefense/VulnWhisperer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix cvssX_severity and qualys_vm dns

Browse Source
This commit is contained in:
pemontto
2019-05-13 13:20:02 +01:00
parent dfc4403779
commit 393ec25003
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
vulnwhisp/frameworks/qualys_vm.py
View File

@ -180,8 +180,11 @@ class qualysVulnScan:
# Set asset to ip # Set asset to ip
df['asset'] = df['ip'] df['asset'] = df['ip']
# Set dns to fqdn if missing
df.loc[df['dns'] == '', 'dns'] = df['fqdn']
# Convert Qualys severity to standardised risk number # Convert Qualys severity to standardised risk number
df['risk_number'] = df['severity'].astype(int)-1 df['risk_number'] = df['severity'].astype(int)-1
df.fillna('', inplace=True) df.fillna('', inplace=True)

5
vulnwhisp/vulnwhisp.py
View File

@ -310,11 +310,11 @@ class vulnWhispererBase(object):
if cvss_version in df: if cvss_version in df:
self.logger.debug('Normalising {} severity'.format(cvss_version)) self.logger.debug('Normalising {} severity'.format(cvss_version))
df[cvss_version] = df[cvss_version].astype('float') df[cvss_version] = df[cvss_version].astype('float')
df[cvss_version + '_severity'] = 'informational' # df[cvss_version + '_severity'] = 'informational'
df.loc[(df[cvss_version] > 0) & (df[cvss_version] < 3), cvss_version + '_severity'] = 'low' df.loc[(df[cvss_version] > 0) & (df[cvss_version] < 3), cvss_version + '_severity'] = 'low'
df.loc[(df[cvss_version] >= 3) & (df[cvss_version] < 6), cvss_version + '_severity'] = 'medium' df.loc[(df[cvss_version] >= 3) & (df[cvss_version] < 6), cvss_version + '_severity'] = 'medium'
df.loc[(df[cvss_version] >= 6) & (df[cvss_version] < 9), cvss_version + '_severity'] = 'high' df.loc[(df[cvss_version] >= 6) & (df[cvss_version] < 9), cvss_version + '_severity'] = 'high'
df.loc[df[cvss_version] > 9, cvss_version + '_severity'] = 'critical' df.loc[(df[cvss_version] >= 9) & (df[cvss_version].notnull()), cvss_version + '_severity'] = 'critical'
# Get a single cvss score derived from cvss3 else cvss2 # Get a single cvss score derived from cvss3 else cvss2
if not 'cvss' in df: if not 'cvss' in df:
@ -324,6 +324,7 @@ class vulnWhispererBase(object):
if 'cvss3' in df: if 'cvss3' in df:
df.loc[df['cvss3'].notnull(), 'cvss'] = df.loc[df['cvss3'].notnull(), 'cvss3'] df.loc[df['cvss3'].notnull(), 'cvss'] = df.loc[df['cvss3'].notnull(), 'cvss3']
df.loc[df['cvss3'].notnull(), 'cvss_severity'] = df.loc[df['cvss3'].notnull(), 'cvss3_severity'] df.loc[df['cvss3'].notnull(), 'cvss_severity'] = df.loc[df['cvss3'].notnull(), 'cvss3_severity']
df['cvss_severity'].fillna('informational', inplace=True)
self.logger.debug('Creating Unique Document ID') self.logger.debug('Creating Unique Document ID')
df['_unique'] = df.index.values df['_unique'] = df.index.values