mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
a599889152
**Related issue:** Resolves #41644 There are two cases that exist in the cpe database where this generic logic could not be applied. django from python_packages: gofiber:django djangoproject:django npm from npm_packages: microsoft:npm npmjs:npm These will require individual cve overrides that is outside the scope of this task. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. - [x] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters. ## Testing - [x] Added/updated automated tests - [x] QA'd all new/changed functionality manually <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Enhanced CPE (Common Platform Enumeration) matching to reduce non-deterministic vendor selection when multiple vendors exist for the same software product. The algorithm now incorporates software ecosystem information to ensure more accurate and consistent vulnerability resolution across package types. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
2680 lines
76 KiB
Go
2680 lines
76 KiB
Go
package nvd
|
||
|
||
import (
|
||
"compress/gzip"
|
||
"context"
|
||
"log/slog"
|
||
"net/http"
|
||
"net/http/httptest"
|
||
"os"
|
||
"path/filepath"
|
||
"regexp"
|
||
"strings"
|
||
"testing"
|
||
"time"
|
||
|
||
"github.com/fleetdm/fleet/v4/pkg/nettest"
|
||
"github.com/fleetdm/fleet/v4/server/fleet"
|
||
"github.com/fleetdm/fleet/v4/server/mock"
|
||
"github.com/fleetdm/fleet/v4/server/vulnerabilities/nvd/tools/cpedict"
|
||
"github.com/stretchr/testify/assert"
|
||
"github.com/stretchr/testify/require"
|
||
)
|
||
|
||
func TestCPEFromSoftware(t *testing.T) {
|
||
tempDir := t.TempDir()
|
||
|
||
items, err := cpedict.Decode(strings.NewReader(XmlCPETestDict))
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
|
||
err = GenerateCPEDB(dbPath, items.Items)
|
||
require.NoError(t, err)
|
||
|
||
db, err := sqliteDB(dbPath)
|
||
require.NoError(t, err)
|
||
|
||
reCache := newRegexpCache()
|
||
|
||
// checking a version that exists works
|
||
cpe, err := CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{Name: "Vendor Product-1.app", Version: "1.2.3", BundleIdentifier: "vendor", Source: "apps"}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:vendor:product-1:1.2.3:*:*:*:*:macos:*:*", cpe)
|
||
|
||
// follows many deprecations
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{Name: "Vendor2 Product2.app", Version: "0.3", BundleIdentifier: "vendor2", Source: "apps"}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:vendor2:product4:0.3:*:*:*:*:macos:*:*", cpe)
|
||
|
||
// When multiple CPE candidates share the same product name and no vendor info
|
||
// is available, ORDER BY ensures deterministic results across runs.
|
||
for range 5 {
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "Line", Version: "3.5.1", Source: "chrome_extensions",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:ge:line:3.5.1:*:*:*:*:chrome:*:*", cpe, "should be deterministic across runs")
|
||
}
|
||
|
||
// When vendor info is present and matches a CPE vendor, prefer that match.
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "Line", Version: "4.3.1", Vendor: "linecorp inc", Source: "apps",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:linecorp:line:4.3.1:*:*:*:*:macos:*:*", cpe)
|
||
|
||
// Deprecated CPE: when the only matching CPE is deprecated, follows the deprecation
|
||
// chain to find the non-deprecated replacement.
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "Widget", Version: "1.0", Vendor: "goodcorp inc", Source: "programs",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:goodcorp:correct_result:1.0:*:*:*:*:windows:*:*", cpe)
|
||
|
||
// Does not error on Unicode Names
|
||
_, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{Name: "Девушка Фонарём", Version: "1.2.3", BundleIdentifier: "vendor", Source: "apps"}, nil, reCache)
|
||
require.NoError(t, err)
|
||
|
||
// Does not error on names that sanitize to empty (e.g. only special characters)
|
||
_, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{Name: "[", Version: "1.2.3", BundleIdentifier: "vendor", Source: "apps"}, nil,
|
||
reCache)
|
||
require.NoError(t, err)
|
||
|
||
// Does not error on names that sanitize to FTS5 reserved keywords (AND, OR, NOT).
|
||
// These names are composed of special characters surrounding a keyword, so after
|
||
// sanitizeMatch strips non-alphanumeric chars and quotes each token, the keyword
|
||
// becomes a quoted literal instead of an FTS5 operator.
|
||
ftsKeywordNames := []string{
|
||
"_OR_", // sanitizes to `"OR"`
|
||
"(AND)", // sanitizes to `"AND"`
|
||
"[NOT]", // sanitizes to `"NOT"`
|
||
"--OR--", // sanitizes to `"OR"`
|
||
"OR - Debug", // sanitizes to `"OR" "Debug"`
|
||
"foo - OR", // sanitizes to `"foo" "OR"`
|
||
}
|
||
for _, name := range ftsKeywordNames {
|
||
_, err = CPEFromSoftware(
|
||
t.Context(), slog.New(slog.DiscardHandler), db,
|
||
&fleet.Software{Name: name, Version: "1.0", Source: "programs"}, nil, reCache,
|
||
)
|
||
require.NoError(t, err, "software name %q should not cause FTS5 syntax error", name)
|
||
}
|
||
|
||
// Target_SW scoring: python_packages source should prefer python vendor over jenkins vendor
|
||
// when multiple CPE entries exist for the same product name.
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "requests", Version: "2.31.0", Source: "python_packages",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:python:requests:2.31.0:*:*:*:*:python:*:*", cpe,
|
||
"python_packages should prefer python:requests (vendor contains 'python')")
|
||
|
||
// Target_SW scoring: npm_packages source should prefer openjsf vendor over checkpoint vendor
|
||
// when the CPE has target_sw=node.js matching the expected target_sw.
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "express", Version: "4.18.0", Source: "npm_packages",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:openjsf:express:4.18.0:*:*:*:*:node.js:*:*", cpe,
|
||
"npm_packages should prefer openjsf:express with target_sw=node.js")
|
||
|
||
// Target_SW scoring with <product>_project fallback pattern.
|
||
// For duplicity from python_packages, neither vendor relates to Python ecosystem, but
|
||
// duplicity_project:duplicity follows the NVD "<product>_project" pattern for upstream CPEs.
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "duplicity", Version: "0.8.0", Source: "python_packages",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:duplicity_project:duplicity:0.8.0:*:*:*:*:python:*:*", cpe,
|
||
"should prefer duplicity_project (upstream) over debian (distro-specific) using _project pattern")
|
||
|
||
// Target_SW scoring: deb_packages source should prefer debian vendor for duplicity
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{
|
||
Name: "duplicity", Version: "0.8.0", Source: "deb_packages",
|
||
}, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:debian:duplicity:0.8.0:*:*:*:*:*:*:*", cpe,
|
||
"deb_packages duplicity should prefer debian:duplicity (vendor contains 'debian')")
|
||
}
|
||
|
||
func TestCPETranslations(t *testing.T) {
|
||
tempDir := t.TempDir()
|
||
|
||
items, err := cpedict.Decode(strings.NewReader(XmlCPETestDict))
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
|
||
err = GenerateCPEDB(dbPath, items.Items)
|
||
require.NoError(t, err)
|
||
|
||
db, err := sqliteDB(dbPath)
|
||
require.NoError(t, err)
|
||
|
||
tt := []struct {
|
||
Name string
|
||
Translations CPETranslations
|
||
Software *fleet.Software
|
||
Expected string
|
||
}{
|
||
{
|
||
Name: "simple match",
|
||
Translations: CPETranslations{
|
||
{
|
||
Software: CPETranslationSoftware{
|
||
Name: []string{"X"},
|
||
Source: []string{"apps"},
|
||
},
|
||
Filter: CPETranslation{
|
||
Product: []string{"product-1"},
|
||
Vendor: []string{"vendor"},
|
||
},
|
||
},
|
||
},
|
||
Software: &fleet.Software{
|
||
Name: "X",
|
||
Version: "1.2.3",
|
||
Source: "apps",
|
||
},
|
||
Expected: "cpe:2.3:a:vendor:product-1:1.2.3:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
Name: "match name or",
|
||
Translations: CPETranslations{
|
||
{
|
||
Software: CPETranslationSoftware{
|
||
Name: []string{"X", "Y"},
|
||
Source: []string{"apps"},
|
||
},
|
||
Filter: CPETranslation{
|
||
Product: []string{"product-1"},
|
||
Vendor: []string{"vendor"},
|
||
},
|
||
},
|
||
},
|
||
Software: &fleet.Software{
|
||
Name: "Y",
|
||
Version: "1.2.3",
|
||
Source: "apps",
|
||
},
|
||
Expected: "cpe:2.3:a:vendor:product-1:1.2.3:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
Name: "match name regexp",
|
||
Translations: CPETranslations{
|
||
{
|
||
Software: CPETranslationSoftware{
|
||
Name: []string{"/^[A-Z]$/"},
|
||
Source: []string{"apps"},
|
||
},
|
||
Filter: CPETranslation{
|
||
Product: []string{"product-1"},
|
||
Vendor: []string{"vendor"},
|
||
},
|
||
},
|
||
},
|
||
Software: &fleet.Software{
|
||
Name: "Z",
|
||
Version: "1.2.3",
|
||
Source: "apps",
|
||
},
|
||
Expected: "cpe:2.3:a:vendor:product-1:1.2.3:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
Name: "translate part",
|
||
Translations: CPETranslations{
|
||
{
|
||
Software: CPETranslationSoftware{
|
||
Name: []string{"X"},
|
||
Source: []string{"apps"},
|
||
},
|
||
Filter: CPETranslation{
|
||
Product: []string{"product-1"},
|
||
Vendor: []string{"vendor"},
|
||
Part: "o",
|
||
},
|
||
},
|
||
},
|
||
Software: &fleet.Software{
|
||
Name: "X",
|
||
Version: "1.2.3",
|
||
Source: "apps",
|
||
},
|
||
Expected: "cpe:2.3:o:vendor:product-1:1.2.3:*:*:*:*:macos:*:*",
|
||
},
|
||
}
|
||
|
||
reCache := newRegexpCache()
|
||
|
||
for _, tc := range tt {
|
||
t.Run(tc.Name, func(t *testing.T) {
|
||
cpe, err := CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, tc.Software, tc.Translations, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, tc.Expected, cpe)
|
||
})
|
||
}
|
||
}
|
||
|
||
func TestSyncCPEDatabase(t *testing.T) {
|
||
nettest.Run(t)
|
||
|
||
tempDir := t.TempDir()
|
||
|
||
// first time, db doesn't exist, so it downloads
|
||
err := DownloadCPEDBFromGithub(tempDir, "")
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
db, err := sqliteDB(dbPath)
|
||
require.NoError(t, err)
|
||
|
||
// and this works afterwards
|
||
reCache := newRegexpCache()
|
||
|
||
software := &fleet.Software{
|
||
Name: "1Password.app",
|
||
Version: "7.2.3",
|
||
BundleIdentifier: "com.1password.1password",
|
||
Source: "apps",
|
||
}
|
||
cpe, err := CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, software, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:1password:1password:7.2.3:*:*:*:*:macos:*:*", cpe)
|
||
|
||
npmCPE, err := CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{Name: "Adaltas Mixme 0.4.0 for Node.js", Version: "0.4.0", Source: "npm_packages"}, nil, reCache)
|
||
require.NoError(t, err)
|
||
assert.Equal(t, "cpe:2.3:a:adaltas:mixme:0.4.0:*:*:*:*:node.js:*:*", npmCPE)
|
||
|
||
windowsCPE, err := CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &fleet.Software{Name: "HP Storage Data Protector 8.0 for Windows 8", Version: "8.0", Source: "programs"}, nil, reCache)
|
||
require.NoError(t, err)
|
||
assert.Equal(t, "cpe:2.3:a:hp:storage_data_protector:8.0:*:*:*:*:windows:*:*", windowsCPE)
|
||
|
||
// but now we truncate to make sure searching for cpe fails
|
||
err = os.Truncate(dbPath, 0)
|
||
require.NoError(t, err)
|
||
_, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, software, nil, reCache)
|
||
require.Error(t, err)
|
||
|
||
// and we make the db older than the release
|
||
newTime := time.Date(2000, 1, 1, 1, 1, 1, 1, time.UTC)
|
||
err = os.Chtimes(dbPath, newTime, newTime)
|
||
require.NoError(t, err)
|
||
|
||
// then it will download
|
||
err = DownloadCPEDBFromGithub(tempDir, "")
|
||
require.NoError(t, err)
|
||
|
||
// let's register the mtime for the db
|
||
stat, err := os.Stat(dbPath)
|
||
require.NoError(t, err)
|
||
mtime := stat.ModTime()
|
||
|
||
db.Close()
|
||
db, err = sqliteDB(dbPath)
|
||
require.NoError(t, err)
|
||
defer db.Close()
|
||
|
||
cpe, err = CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, software, nil, reCache)
|
||
require.NoError(t, err)
|
||
require.Equal(t, "cpe:2.3:a:1password:1password:7.2.3:*:*:*:*:macos:*:*", cpe)
|
||
|
||
// let some time pass
|
||
time.Sleep(2 * time.Second)
|
||
|
||
// let's check it doesn't download because it's new enough
|
||
err = DownloadCPEDBFromGithub(tempDir, "")
|
||
require.NoError(t, err)
|
||
stat, err = os.Stat(dbPath)
|
||
require.NoError(t, err)
|
||
require.Equal(t, mtime, stat.ModTime())
|
||
}
|
||
|
||
type fakeSoftwareIterator struct {
|
||
index int
|
||
softwares []*fleet.Software
|
||
closed bool
|
||
}
|
||
|
||
func (f *fakeSoftwareIterator) Next() bool {
|
||
return f.index < len(f.softwares)
|
||
}
|
||
|
||
func (f *fakeSoftwareIterator) Value() (*fleet.Software, error) {
|
||
s := f.softwares[f.index]
|
||
f.index++
|
||
return s, nil
|
||
}
|
||
|
||
func (f *fakeSoftwareIterator) Err() error { return nil }
|
||
func (f *fakeSoftwareIterator) Close() error { f.closed = true; return nil }
|
||
|
||
func TestConsumeCPEBuffer(t *testing.T) {
|
||
ctx := context.Background()
|
||
|
||
t.Run("empty buffer", func(t *testing.T) {
|
||
var upserted []fleet.SoftwareCPE
|
||
var deleted []fleet.SoftwareCPE
|
||
|
||
ds := new(mock.Store)
|
||
ds.UpsertSoftwareCPEsFunc = func(ctx context.Context, cpes []fleet.SoftwareCPE) (int64, error) {
|
||
upserted = append(upserted, cpes...)
|
||
return int64(len(upserted)), nil
|
||
}
|
||
|
||
ds.DeleteSoftwareCPEsFunc = func(ctx context.Context, cpes []fleet.SoftwareCPE) (int64, error) {
|
||
deleted = append(deleted, cpes...)
|
||
return int64(len(deleted)), nil
|
||
}
|
||
err := consumeCPEBuffer(ctx, ds, nil, nil)
|
||
require.NoError(t, err)
|
||
require.Empty(t, upserted)
|
||
require.Empty(t, deleted)
|
||
})
|
||
|
||
t.Run("inserts and deletes accordantly", func(t *testing.T) {
|
||
var upserted []fleet.SoftwareCPE
|
||
var deleted []fleet.SoftwareCPE
|
||
|
||
ds := new(mock.Store)
|
||
ds.UpsertSoftwareCPEsFunc = func(ctx context.Context, cpes []fleet.SoftwareCPE) (int64, error) {
|
||
upserted = append(upserted, cpes...)
|
||
return int64(len(upserted)), nil
|
||
}
|
||
|
||
ds.DeleteSoftwareCPEsFunc = func(ctx context.Context, cpes []fleet.SoftwareCPE) (int64, error) {
|
||
deleted = append(deleted, cpes...)
|
||
return int64(len(deleted)), nil
|
||
}
|
||
|
||
cpes := []fleet.SoftwareCPE{
|
||
{
|
||
SoftwareID: 1,
|
||
CPE: "",
|
||
},
|
||
{
|
||
SoftwareID: 2,
|
||
CPE: "cpe-1",
|
||
},
|
||
}
|
||
|
||
err := consumeCPEBuffer(ctx, ds, nil, cpes)
|
||
require.NoError(t, err)
|
||
require.Equal(t, len(upserted), 1)
|
||
require.Equal(t, upserted[0].CPE, cpes[1].CPE)
|
||
|
||
require.Equal(t, len(deleted), 1)
|
||
require.Equal(t, deleted[0].CPE, cpes[0].CPE)
|
||
})
|
||
}
|
||
|
||
func TestTranslateSoftwareToCPE(t *testing.T) {
|
||
tempDir := t.TempDir()
|
||
|
||
ds := new(mock.Store)
|
||
|
||
var cpes []string
|
||
|
||
ds.UpsertSoftwareCPEsFunc = func(ctx context.Context, vals []fleet.SoftwareCPE) (int64, error) {
|
||
for _, v := range vals {
|
||
cpes = append(cpes, v.CPE)
|
||
}
|
||
return int64(len(vals)), nil
|
||
}
|
||
|
||
iterator := &fakeSoftwareIterator{
|
||
softwares: []*fleet.Software{
|
||
{
|
||
ID: 1,
|
||
Name: "Product",
|
||
Version: "1.2.3",
|
||
BundleIdentifier: "vendor",
|
||
Source: "apps",
|
||
},
|
||
{
|
||
ID: 2,
|
||
Name: "Product2",
|
||
Version: "0.3",
|
||
BundleIdentifier: "vendor2",
|
||
Source: "apps",
|
||
GenerateCPE: "something_wrong",
|
||
},
|
||
// For the following software entry, the matched cpe will match 'GenerateCPE', so we are
|
||
// adding it to test that that 'UpsertSoftwareCPEs' will only be called iff software.GenerateCPE != detected CPE.
|
||
{
|
||
ID: 3,
|
||
Name: "Product2",
|
||
Version: "0.3",
|
||
BundleIdentifier: "vendor2",
|
||
Source: "apps",
|
||
GenerateCPE: "cpe:2.3:a:vendor2:product4:0.3:*:*:*:*:macos:*:*",
|
||
},
|
||
},
|
||
}
|
||
|
||
ds.AllSoftwareIteratorFunc = func(ctx context.Context, q fleet.SoftwareIterQueryOptions) (fleet.SoftwareIterator, error) {
|
||
return iterator, nil
|
||
}
|
||
|
||
items, err := cpedict.Decode(strings.NewReader(XmlCPETestDict))
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
err = GenerateCPEDB(dbPath, items.Items)
|
||
require.NoError(t, err)
|
||
|
||
err = TranslateSoftwareToCPE(t.Context(), ds, tempDir, slog.New(slog.DiscardHandler))
|
||
require.NoError(t, err)
|
||
assert.Equal(t, []string{
|
||
"cpe:2.3:a:vendor2:product4:0.3:*:*:*:*:macos:*:*",
|
||
}, cpes)
|
||
assert.True(t, iterator.closed)
|
||
}
|
||
|
||
// TestTranslateSoftwareToCPEIgnoreEmptyVersion tests that TranslateSoftwareToCPE ignores
|
||
// software that was ingested with an empty version field. The test will simulate a previous
|
||
// version of Fleet storing an incorrect CPE for the software, to test that an upgrade
|
||
// will clear out the invalid CPE from the DB.
|
||
func TestTranslateSoftwareToCPEIgnoreEmptyVersion(t *testing.T) {
|
||
tempDir := t.TempDir()
|
||
|
||
ds := new(mock.Store)
|
||
|
||
// The incorrect CPE for the software should now be deleted because the ingested software doesn't
|
||
// have a version field.
|
||
ds.DeleteSoftwareCPEsFunc = func(ctx context.Context, cpes []fleet.SoftwareCPE) (int64, error) {
|
||
require.Len(t, cpes, 1)
|
||
require.Equal(t, cpes[0].SoftwareID, uint(1))
|
||
return 1, nil
|
||
}
|
||
|
||
ds.AllSoftwareIteratorFunc = func(ctx context.Context, q fleet.SoftwareIterQueryOptions) (fleet.SoftwareIterator, error) {
|
||
return &fakeSoftwareIterator{
|
||
softwares: []*fleet.Software{
|
||
{
|
||
ID: 1,
|
||
Name: "foobar",
|
||
Version: "",
|
||
BundleIdentifier: "vendor2",
|
||
Source: "apps",
|
||
// Set an incorrect CPE on the DB to simulate a CPE being generated incorrectly
|
||
// for this software on a previous version of Fleet.
|
||
GenerateCPE: "cpe:2.3:a:vendor2:foobar:*:*:*:*:*:macos:*:*",
|
||
},
|
||
},
|
||
}, nil
|
||
}
|
||
|
||
items, err := cpedict.Decode(strings.NewReader(XmlCPETestDict))
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
err = GenerateCPEDB(dbPath, items.Items)
|
||
require.NoError(t, err)
|
||
|
||
err = TranslateSoftwareToCPE(t.Context(), ds, tempDir, slog.New(slog.DiscardHandler))
|
||
require.NoError(t, err)
|
||
require.True(t, ds.DeleteSoftwareCPEsFuncInvoked)
|
||
}
|
||
|
||
func TestSyncsCPEFromURL(t *testing.T) {
|
||
ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||
zw := gzip.NewWriter(w)
|
||
|
||
_, err := zw.Write([]byte("Hello world!"))
|
||
require.NoError(t, err)
|
||
err = zw.Close()
|
||
require.NoError(t, err)
|
||
}))
|
||
defer ts.Close()
|
||
|
||
tempDir := t.TempDir()
|
||
err := DownloadCPEDBFromGithub(tempDir, ts.URL+"/hello-world.gz")
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
stored, err := os.ReadFile(dbPath)
|
||
require.NoError(t, err)
|
||
assert.Equal(t, "Hello world!", string(stored))
|
||
}
|
||
|
||
func TestLegacyCPEDB(t *testing.T) {
|
||
// Older versions of fleet used "select * ..." when querying from the cpe and cpe_search tables
|
||
// Ensure that this still works when generating the new cpe database.
|
||
type IndexedCPEItem struct {
|
||
ID int `json:"id" db:"rowid"`
|
||
Title string `json:"title" db:"title"`
|
||
Version *string `json:"version" db:"version"`
|
||
TargetSW *string `json:"target_sw" db:"target_sw"`
|
||
CPE23 string `json:"cpe23" db:"cpe23"`
|
||
Deprecated bool `json:"deprecated" db:"deprecated"`
|
||
}
|
||
tempDir := t.TempDir()
|
||
|
||
items, err := cpedict.Decode(strings.NewReader(XmlCPETestDict))
|
||
require.NoError(t, err)
|
||
|
||
dbPath := filepath.Join(tempDir, "cpe.sqlite")
|
||
|
||
err = GenerateCPEDB(dbPath, items.Items)
|
||
require.NoError(t, err)
|
||
|
||
db, err := sqliteDB(dbPath)
|
||
require.NoError(t, err)
|
||
|
||
query := `SELECT rowid, * FROM cpe WHERE rowid in (
|
||
SELECT rowid FROM cpe_search WHERE title MATCH ?
|
||
) and version = ? order by deprecated asc`
|
||
|
||
var indexedCPEs []IndexedCPEItem
|
||
err = db.Select(&indexedCPEs, query, "product", "1.2.3")
|
||
require.NoError(t, err)
|
||
|
||
require.Len(t, indexedCPEs, 1)
|
||
}
|
||
|
||
func TestCPEFromSoftwareIntegration(t *testing.T) {
|
||
// Note: make sure to run `go test` with "-tags fts5" for this test, since it uses sqlite.
|
||
testCases := []struct {
|
||
software fleet.Software
|
||
cpe string
|
||
}{
|
||
// This should work but there are no CPE entries in the database despite CVE-2024-25659 existing, using
|
||
// the following cpe_translations changes:
|
||
/*
|
||
{
|
||
"software": {
|
||
"bundle_identifier": ["/^TNMS_/"],
|
||
"source": ["apps"]
|
||
},
|
||
"filter": {
|
||
"product": ["nokia"],
|
||
"vendor": ["transcend_network_management_system"]
|
||
}
|
||
},
|
||
*/
|
||
/*{
|
||
software: fleet.Software{
|
||
Name: "TNMS",
|
||
BundleIdentifier: "TNMS_19.10.3",
|
||
Source: "apps",
|
||
Version: "19.10.3",
|
||
},
|
||
cpe: "cpe:2.3:a:nokia:transcend_network_management_system:19.10.3:*:*:*:*:macos:*:*",
|
||
},*/
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Oracle SQLDeveloper",
|
||
BundleIdentifier: "com.oracle.SQLDeveloper",
|
||
Source: "apps",
|
||
Version: "24.3.1",
|
||
},
|
||
cpe: "cpe:2.3:a:oracle:sql_developer:24.3.1:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Poly Lens Desktop",
|
||
BundleIdentifier: "com.poly.lens.legacyhost.app",
|
||
Source: "apps",
|
||
},
|
||
cpe: "cpe:2.3:a:poly:lens:*:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "BlueStacksMIM",
|
||
BundleIdentifier: "com.now.gg.BlueStacksMIM",
|
||
Source: "apps",
|
||
Version: "4.100.1",
|
||
},
|
||
cpe: "cpe:2.3:a:bluestacks:bluestacks:4.100.1:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Adobe Acrobat Reader DC.app",
|
||
Source: "apps",
|
||
Version: "22.002.20191",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.adobe.Reader",
|
||
},
|
||
cpe: "cpe:2.3:a:adobe:acrobat_reader_dc:22.002.20191:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Adobe Lightroom.app",
|
||
Source: "apps",
|
||
Version: "5.5",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.adobe.mas.lightroomCC",
|
||
}, cpe: "cpe:2.3:a:adobe:lightroom:5.5:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Finder.app",
|
||
Source: "apps",
|
||
Version: "12.5",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.finder",
|
||
}, cpe: "cpe:2.3:a:apple:finder:12.5:*:*:*:*:macos:*:*",
|
||
},
|
||
{ // Make sure we generate the expected CPE so we can match it downstream and drop the false negative vulns
|
||
software: fleet.Software{
|
||
Name: "Dota 2",
|
||
Source: "apps",
|
||
Version: "1.0", // default version; on ingestion it's actually blank
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
},
|
||
cpe: "cpe:2.3:a:valvesoftware:dota_2:1.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Firefox.app",
|
||
Source: "apps",
|
||
Version: "105.0.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "org.mozilla.firefox",
|
||
}, cpe: "cpe:2.3:a:mozilla:firefox:105.0.1:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Google Chrome.app",
|
||
Source: "apps",
|
||
Version: "105.0.5195.125",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.google.Chrome",
|
||
}, cpe: "cpe:2.3:a:google:chrome:105.0.5195.125:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "iCloud.app",
|
||
Source: "apps",
|
||
Version: "1.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.CloudKit.ShareBear",
|
||
}, cpe: "cpe:2.3:a:apple:icloud:1.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Installer.app",
|
||
Source: "apps",
|
||
Version: "6.2.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.installer",
|
||
}, cpe: "cpe:2.3:a:apple:installer:6.2.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Mail.app",
|
||
Source: "apps",
|
||
Version: "16.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.mail",
|
||
}, cpe: "cpe:2.3:a:apple:mail:16.0:*:*:*:*:macos:*:*",
|
||
},
|
||
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Music.app",
|
||
Source: "apps",
|
||
Version: "1.2.5",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.Music",
|
||
}, cpe: "cpe:2.3:a:apple:music:1.2.5:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "OneDrive.app",
|
||
Source: "apps",
|
||
Version: "22.186.0904",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.microsoft.OneDrive-mac",
|
||
}, cpe: "cpe:2.3:a:microsoft:onedrive:22.186.0904:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "osquery.app",
|
||
Source: "apps",
|
||
Version: "5.4.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "io.osquery.agent",
|
||
}, cpe: "cpe:2.3:a:linuxfoundation:osquery:5.4.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Preview.app",
|
||
Source: "apps",
|
||
Version: "11.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.Preview",
|
||
}, cpe: "cpe:2.3:a:apple:preview:11.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Python.app",
|
||
Source: "apps",
|
||
Version: "3.8.9",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.python3",
|
||
}, cpe: "cpe:2.3:a:python:python:3.8.9:-:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Python.app",
|
||
Source: "apps",
|
||
Version: "3.10.7",
|
||
Vendor: "",
|
||
BundleIdentifier: "org.python.python",
|
||
}, cpe: "cpe:2.3:a:python:python:3.10.7:-:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Safari.app",
|
||
Source: "apps",
|
||
Version: "16.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.Safari",
|
||
}, cpe: "cpe:2.3:a:apple:safari:16.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Shortcuts.app",
|
||
Source: "apps",
|
||
Version: "5.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.shortcuts",
|
||
}, cpe: "cpe:2.3:a:apple:shortcuts:5.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Software Update.app",
|
||
Source: "apps",
|
||
Version: "6",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.SoftwareUpdate",
|
||
}, cpe: "cpe:2.3:a:apple:software_update:6:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Terminal.app",
|
||
Source: "apps",
|
||
Version: "2.12.7",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.Terminal",
|
||
}, cpe: "cpe:2.3:a:apple:terminal:2.12.7:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "TextEdit.app",
|
||
Source: "apps",
|
||
Version: "1.17",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.apple.TextEdit",
|
||
}, cpe: "cpe:2.3:a:apple:textedit:1.17:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "zoom.us.app",
|
||
Source: "apps",
|
||
Version: "5.11.6 (9890)",
|
||
Vendor: "",
|
||
BundleIdentifier: "us.zoom.xos",
|
||
}, cpe: "cpe:2.3:a:zoom:zoom:5.11.6.9890:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "1Password – Password Manager",
|
||
Source: "chrome_extensions",
|
||
Version: "2.3.8",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:1password:1password:2.3.8:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Adblock Plus - free ad blocker",
|
||
Source: "chrome_extensions",
|
||
Version: "3.14.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:adblockplus:adblock_plus:3.14.2:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "AdBlock - best ad blocker",
|
||
Source: "chrome_extensions",
|
||
Version: "5.1.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:getadblock:adblock:5.1.1:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "AdBlock - best ad blocker",
|
||
Source: "chrome_extensions",
|
||
Version: "5.1.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:getadblock:adblock:5.1.2:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "uBlock Origin",
|
||
Source: "chrome_extensions",
|
||
Version: "1.44.4",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:ublockorigin:ublock_origin:1.44.4:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "uBlock Origin",
|
||
Source: "chrome_extensions",
|
||
Version: "1.44.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:ublockorigin:ublock_origin:1.44.2:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "uBlock Origin",
|
||
Source: "chrome_extensions",
|
||
Version: "1.44.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:ublockorigin:ublock_origin:1.44.0:*:*:*:*:chrome:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Bing",
|
||
Source: "firefox_addons",
|
||
Version: "1.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:microsoft:bing:1.3:*:*:*:*:firefox:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "DuckDuckGo",
|
||
Source: "firefox_addons",
|
||
Version: "1.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:duckduckgo:duckduckgo:1.1:*:*:*:*:firefox:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "node",
|
||
Source: "homebrew_packages",
|
||
Version: "18.9.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:nodejs:node.js:18.9.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "1Password",
|
||
Source: "programs",
|
||
Version: "8.9.5",
|
||
Vendor: "AgileBits Inc.",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:1password:1password:8.9.5:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "7-Zip 22.01 (x64)",
|
||
Source: "programs",
|
||
Version: "22.01",
|
||
Vendor: "Igor Pavlov",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:7-zip:7-zip:22.01:*:*:*:*:windows:*:*",
|
||
}, /*
|
||
{ // See #29570
|
||
software: fleet.Software{
|
||
Name: "Adobe Acrobat DC (64-bit)",
|
||
Source: "programs",
|
||
Version: "22.002.20212",
|
||
Vendor: "Adobe",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:adobe:acrobat_dc:22.002.20212:*:*:*:*:windows:*:*",
|
||
},
|
||
*/{
|
||
software: fleet.Software{
|
||
Name: "Brave",
|
||
Source: "programs",
|
||
Version: "105.1.43.93",
|
||
Vendor: "Brave Software Inc",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:brave:brave:105.1.43.93:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Docker Desktop",
|
||
Source: "programs",
|
||
Version: "4.12.0",
|
||
Vendor: "Docker Inc.",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:docker:desktop:4.12.0:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Dropbox",
|
||
Source: "programs",
|
||
Version: "157.4.4808",
|
||
Vendor: "Dropbox, Inc.",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:dropbox:dropbox:157.4.4808:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Git",
|
||
Source: "programs",
|
||
Version: "2.37.1",
|
||
Vendor: "The Git Development Community",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:git:git:2.37.1:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Google Chrome",
|
||
Source: "programs",
|
||
Version: "105.0.5195.127",
|
||
Vendor: "Google LLC",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:google:chrome:105.0.5195.127:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft Edge",
|
||
Source: "programs",
|
||
Version: "105.0.1343.50",
|
||
Vendor: "Microsoft Corporation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:microsoft:edge_chromium:105.0.1343.50:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft OneDrive",
|
||
Source: "programs",
|
||
Version: "22.181.0828.0002",
|
||
Vendor: "Microsoft Corporation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:microsoft:onedrive:22.181.0828.0002:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft Visual Studio Code (User)",
|
||
Source: "programs",
|
||
Version: "1.71.2",
|
||
Vendor: "Microsoft Corporation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:microsoft:visual_studio_code:1.71.2:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Mozilla Firefox (x64 en-US)",
|
||
Source: "programs",
|
||
Version: "105.0.1",
|
||
Vendor: "Mozilla",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:mozilla:firefox:105.0.1:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Node.js",
|
||
Source: "programs",
|
||
Version: "16.16.0",
|
||
Vendor: "Node.js Foundation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:nodejs:node.js:16.16.0:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Oracle VM VirtualBox 6.1.38",
|
||
Source: "programs",
|
||
Version: "6.1.38",
|
||
Vendor: "Oracle Corporation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:oracle:vm_virtualbox:6.1.38:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Python 3.10.6 (64-bit)",
|
||
Source: "programs",
|
||
Version: "3.10.6150.0",
|
||
Vendor: "Python Software Foundation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:python:3.10.6:-:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Python 3.14.0a1 (64-bit)",
|
||
Source: "programs",
|
||
Version: "3.14.101.0",
|
||
Vendor: "Python Software Foundation",
|
||
}, cpe: "cpe:2.3:a:python:python:3.14.0:alpha1:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Python 3.14.0b2 (64-bit)",
|
||
Source: "programs",
|
||
Version: "3.14.112.0",
|
||
Vendor: "Python Software Foundation",
|
||
}, cpe: "cpe:2.3:a:python:python:3.14.0:beta2:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Python 3.14.0rc1 (64-bit)",
|
||
Source: "programs",
|
||
Version: "3.14.121.0",
|
||
Vendor: "Python Software Foundation",
|
||
}, cpe: "cpe:2.3:a:python:python:3.14.0:rc1:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Visual Studio Community 2022",
|
||
Source: "programs",
|
||
Version: "17.2.5",
|
||
Vendor: "Microsoft Corporation",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:microsoft:visual_studio_community:17.2.5:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "VLC media player",
|
||
Source: "programs",
|
||
Version: "3.0.17.4",
|
||
Vendor: "VideoLAN",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:videolan:vlc_media_player:3.0.17.4:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Zoom",
|
||
Source: "programs",
|
||
Version: "5.11.1 (6602)",
|
||
Vendor: "Zoom Video Communications, Inc.",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:zoom:zoom:5.11.1.6602:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "attrs",
|
||
Source: "python_packages",
|
||
Version: "21.2.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:attrs_project:attrs:21.2.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Brotli",
|
||
Source: "python_packages",
|
||
Version: "1.0.9",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:google:brotli:1.0.9:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "click",
|
||
Source: "python_packages",
|
||
Version: "8.0.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:click_project:click:8.0.3:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "cryptography",
|
||
Source: "python_packages",
|
||
Version: "3.4.8",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:cryptography.io:cryptography:3.4.8:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "decorator",
|
||
Source: "python_packages",
|
||
Version: "4.4.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:decorator:4.4.2:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "duplicity",
|
||
Source: "python_packages",
|
||
Version: "0.8.21",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:duplicity_project:duplicity:0.8.21:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "duplicity",
|
||
Source: "deb_packages",
|
||
Version: "0.8.21",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:debian:duplicity:0.8.21:*:*:*:*:*:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "feedparser",
|
||
Source: "python_packages",
|
||
Version: "6.0.8",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:mark_pilgrim:feedparser:6.0.8:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "html5lib",
|
||
Source: "python_packages",
|
||
Version: "1.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:html5lib:html5lib:1.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "httplib2",
|
||
Source: "python_packages",
|
||
Version: "0.20.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:httplib2_project:httplib2:0.20.2:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ipython",
|
||
Source: "python_packages",
|
||
Version: "7.31.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:ipython:ipython:7.31.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "keyring",
|
||
Source: "python_packages",
|
||
Version: "23.5.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:keyring:23.5.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "language-selector",
|
||
Source: "python_packages",
|
||
Version: "0.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:ubuntu_developers:language-selector:0.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "lxml",
|
||
Source: "python_packages",
|
||
Version: "4.8.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:lxml:lxml:4.8.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "lz4",
|
||
Source: "python_packages",
|
||
Version: "3.1.3+dfsg",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:lz4_project:lz4:3.1.3.dfsg:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Mako",
|
||
Source: "python_packages",
|
||
Version: "1.1.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:sqlalchemy:mako:1.1.3:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Markdown",
|
||
Source: "python_packages",
|
||
Version: "3.3.6",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:cebe:markdown:3.3.6:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "mechanize",
|
||
Source: "python_packages",
|
||
Version: "0.4.7",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:mechanize_project:mechanize:0.4.7:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "msgpack",
|
||
Source: "python_packages",
|
||
Version: "1.0.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:msgpack:msgpack:1.0.3:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "numpy",
|
||
Source: "python_packages",
|
||
Version: "1.21.5",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:numpy:numpy:1.21.5:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "oauthlib",
|
||
Source: "python_packages",
|
||
Version: "3.2.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:oauthlib_project:oauthlib:3.2.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "paramiko",
|
||
Source: "python_packages",
|
||
Version: "2.9.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:paramiko:paramiko:2.9.3:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "parso",
|
||
Source: "python_packages",
|
||
Version: "0.8.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:parso_project:parso:0.8.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Pillow",
|
||
Source: "python_packages",
|
||
Version: "9.0.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:pillow:9.0.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "pip",
|
||
Source: "python_packages",
|
||
Version: "22.2.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:pypa:pip:22.2.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "protobuf",
|
||
Source: "python_packages",
|
||
Version: "3.12.4",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:golang:protobuf:3.12.4:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Pygments",
|
||
Source: "python_packages",
|
||
Version: "2.11.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:pygments:pygments:2.11.2:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "PyJWT",
|
||
Source: "python_packages",
|
||
Version: "2.3.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:pyjwt_project:pyjwt:2.3.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "python-apt",
|
||
Source: "python_packages",
|
||
Version: "2.3.0+ubuntu2.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:debian:python-apt:2.3.0.ubuntu2.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "pyxdg",
|
||
Source: "python_packages",
|
||
Version: "0.27",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:pyxdg:0.27:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "PyYAML",
|
||
Source: "python_packages",
|
||
Version: "5.4.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:pyyaml:pyyaml:5.4.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "reportlab",
|
||
Source: "python_packages",
|
||
Version: "3.6.8",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:reportlab:reportlab:3.6.8:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "requests",
|
||
Source: "python_packages",
|
||
Version: "2.25.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:requests:2.25.1:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "scipy",
|
||
Source: "python_packages",
|
||
Version: "1.8.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:scipy:scipy:1.8.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "setuptools",
|
||
Source: "python_packages",
|
||
Version: "63.2.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:setuptools:63.2.0:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "urllib3",
|
||
Source: "python_packages",
|
||
Version: "1.26.5",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:python:urllib3:1.26.5:*:*:*:*:python:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "UTM.app",
|
||
Source: "apps",
|
||
Version: "3.2.4",
|
||
BundleIdentifier: "com.utmapp.UTM",
|
||
}, cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Docs",
|
||
Source: "chrome_extensions",
|
||
Version: "0.10",
|
||
BundleIdentifier: "",
|
||
}, cpe: "",
|
||
},
|
||
// We don't use NVD to detect Mac Office vulnerabilities so all these should have an empty CPE
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft PowerPoint.app",
|
||
Source: "apps",
|
||
Version: "16.69.1",
|
||
BundleIdentifier: "com.microsoft.Powerpoint",
|
||
}, cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft Word.app",
|
||
Source: "apps",
|
||
Version: "16.69.1",
|
||
BundleIdentifier: "com.microsoft.Word",
|
||
}, cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft Excel.app",
|
||
Source: "apps",
|
||
Version: "16.69.1",
|
||
BundleIdentifier: "com.microsoft.Excel",
|
||
}, cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Docker.app",
|
||
Source: "apps",
|
||
Version: "4.7.1",
|
||
BundleIdentifier: "com.docker.docker",
|
||
}, cpe: "cpe:2.3:a:docker:desktop:4.7.1:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Docker Desktop.app",
|
||
Source: "apps",
|
||
Version: "4.16.2",
|
||
BundleIdentifier: "com.electron.dockerdesktop",
|
||
}, cpe: "cpe:2.3:a:docker:desktop:4.16.2:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Docker Desktop.app",
|
||
Source: "apps",
|
||
Version: "3.5.0",
|
||
BundleIdentifier: "com.electron.docker-frontend",
|
||
}, cpe: "cpe:2.3:a:docker:desktop:3.5.0:*:*:*:*:macos:*:*",
|
||
},
|
||
// 2023-03-06: there are no entries for the docker python package at the NVD dataset.
|
||
{
|
||
software: fleet.Software{
|
||
Name: "docker",
|
||
Source: "python_packages",
|
||
Version: "6.0.1",
|
||
}, cpe: "",
|
||
},
|
||
// 2025-01-20: there are no entries for the jira python package at the NVD dataset.
|
||
{
|
||
software: fleet.Software{
|
||
Name: "jira",
|
||
Source: "python_packages",
|
||
Version: "3.8.0",
|
||
}, cpe: "",
|
||
},
|
||
{ // checks vendor/product matching based on bundle name, including EAPs
|
||
software: fleet.Software{
|
||
Name: "GoLand EAP.app",
|
||
Source: "apps",
|
||
Version: "2022.3.99.123.456",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.jetbrains.goland-EAP",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:goland:2022.3.99.123.456:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "IntelliJ IDEA Community Edition 2022.3.2",
|
||
Source: "programs",
|
||
Version: "223.8617.56",
|
||
Vendor: "",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:intellij_idea:223.8617.56:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "IntelliJ IDEA.app",
|
||
Source: "apps",
|
||
Version: "2022.3.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.jetbrains.intellij",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:intellij_idea:2022.3.3:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "IntelliJ IDEA CE.app",
|
||
Source: "apps",
|
||
Version: "2022.3.3",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.jetbrains.intellij.ce",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:intellij_idea:2022.3.3:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "intellij-idea-ce",
|
||
Source: "homebrew_packages",
|
||
Version: "2023.3.2,233.13135.103",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:intellij_idea:2023.3.2.233.13135.103:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "User PyCharm Custom Name.app", // 2023/10/31: The actual product name must be part of the app name per our code in CPEFromSoftware
|
||
Source: "apps",
|
||
Version: "2019.2",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.jetbrains.pycharm",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:pycharm:2019.2:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "PyCharm Community Edition.app",
|
||
Source: "apps",
|
||
Version: "2022.1",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.jetbrains.pycharm.ce",
|
||
},
|
||
cpe: "cpe:2.3:a:jetbrains:pycharm:2022.1:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "eamodio.gitlens",
|
||
Source: "vscode_extensions",
|
||
Version: "14.9.0",
|
||
Vendor: "GitKraken",
|
||
},
|
||
cpe: "cpe:2.3:a:gitkraken:gitlens:14.9.0:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{ // skipped because the Docker DX VSCode extension has no vulnerabilities, so a CPE hasn't been built
|
||
software: fleet.Software{
|
||
Name: "docker.docker",
|
||
Source: "vscode_extensions",
|
||
Version: "0.6.0",
|
||
Vendor: "Docker",
|
||
},
|
||
cpe: ``,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-python.python",
|
||
Source: "vscode_extensions",
|
||
Version: "2024.2.1",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:python_extension:2024.2.1:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-toolsai.jupyter",
|
||
Source: "vscode_extensions",
|
||
Version: "2024.2.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:jupyter:2024.2.0:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-vsliveshare.vsliveshare",
|
||
Source: "vscode_extensions",
|
||
Version: "1.0.5918",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:visual_studio_live_share:1.0.5918:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "dbaeumer.vscode-eslint",
|
||
Source: "vscode_extensions",
|
||
Version: "2.4.4",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:visual_studio_code_eslint_extension:2.4.4:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "vscjava.vscode-maven",
|
||
Source: "vscode_extensions",
|
||
Version: "0.44.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:vscode-maven:0.44.0:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-vscode.powershell",
|
||
Source: "vscode_extensions",
|
||
Version: "2024.0.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:powershell_extension:2024.0.0:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-vscode-remote.vscode-remote-extensionpack",
|
||
Source: "vscode_extensions",
|
||
Version: "0.25.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:remote_development:0.25.0:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "vknabel.vscode-swiftlint",
|
||
Source: "vscode_extensions",
|
||
Version: "1.8.3",
|
||
Vendor: "vknabel",
|
||
},
|
||
cpe: "cpe:2.3:a:swiftlint_project:swiftlint:1.8.3:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "vknabel.vscode-swiftformat",
|
||
Source: "vscode_extensions",
|
||
Version: "1.6.7",
|
||
Vendor: "vknabel",
|
||
},
|
||
cpe: "cpe:2.3:a:swiftformat_project:swiftformat:1.6.7:*:*:*:*:visual_studio_code:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "jbenden.c-cpp-flylint",
|
||
Source: "vscode_extensions",
|
||
Version: "1.14.0",
|
||
Vendor: "Joseph Benden",
|
||
},
|
||
cpe: `cpe:2.3:a:c\/c\+\+_advanced_lint_project:c\/c\+\+_advanced_lint:1.14.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "stripe.vscode-stripe",
|
||
Source: "vscode_extensions",
|
||
Version: "2.0.14",
|
||
Vendor: "Stripe",
|
||
},
|
||
cpe: `cpe:2.3:a:stripe:stripe:2.0.14:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "vscodevim.vim",
|
||
Source: "vscode_extensions",
|
||
Version: "1.27.2",
|
||
Vendor: "vscodevim",
|
||
},
|
||
cpe: `cpe:2.3:a:vim_project:vim:1.27.2:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "svelte.svelte-vscode",
|
||
Source: "vscode_extensions",
|
||
Version: "108.3.1",
|
||
Vendor: "Svelte",
|
||
},
|
||
cpe: `cpe:2.3:a:svelte:svelte:108.3.1:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "lextudio.restructuredtext",
|
||
Source: "vscode_extensions",
|
||
Version: "189.3.0",
|
||
Vendor: "LeXtudio Inc.",
|
||
},
|
||
cpe: `cpe:2.3:a:lextudio:restructuredtext:189.3.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-vscode-remote.remote-containers",
|
||
Source: "vscode_extensions",
|
||
Version: "0.348.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: `cpe:2.3:a:microsoft:remote:0.348.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-kubernetes-tools.vscode-kubernetes-tools",
|
||
Source: "vscode_extensions",
|
||
Version: "0.348.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: `cpe:2.3:a:microsoft:kubernetes_tools:0.348.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-dotnettools.vscode-dotnet-sdk",
|
||
Source: "vscode_extensions",
|
||
Version: "0.8.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: `cpe:2.3:a:microsoft:.net_education_bundle_sdk_install_tool:0.8.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-dotnettools.vscode-dotnet-runtime",
|
||
Source: "vscode_extensions",
|
||
Version: "2.0.2",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: `cpe:2.3:a:microsoft:.net_install_tool_for_extension_authors:2.0.2:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "ms-vscode-remote.remote-wsl",
|
||
Source: "vscode_extensions",
|
||
Version: "0.86.0",
|
||
Vendor: "Microsoft",
|
||
},
|
||
cpe: `cpe:2.3:a:microsoft:windows_subsystem_for_linux:0.86.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "mongodb.mongodb-vscode",
|
||
Source: "vscode_extensions",
|
||
Version: "1.5.0",
|
||
Vendor: "MongoDB",
|
||
},
|
||
cpe: `cpe:2.3:a:mongodb:mongodb:1.5.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "oracle.mysql-shell-for-vs-code",
|
||
Source: "vscode_extensions",
|
||
Version: "1.14.2",
|
||
Vendor: "MongoDB",
|
||
},
|
||
cpe: `cpe:2.3:a:oracle:mysql_shell:1.14.2:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "snyk-security.snyk-vulnerability-scanner",
|
||
Source: "vscode_extensions",
|
||
Version: "2.3.6",
|
||
Vendor: "Snyk",
|
||
},
|
||
cpe: `cpe:2.3:a:snyk:snyk_security:2.3.6:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "sourcegraph.cody-ai",
|
||
Source: "vscode_extensions",
|
||
Version: "1.8.0",
|
||
Vendor: "Sourcegraph",
|
||
},
|
||
cpe: `cpe:2.3:a:sourcegraph:cody:1.8.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
// There are vulnerabilities for `cpe:2.3:a:redhat:vscode-xml:` in
|
||
// NVD's database but there's no entry for `cpe:2.3:a:redhat:vscode-xml:0.26.1`
|
||
// in NVD's CPE database.
|
||
/*
|
||
{
|
||
software: fleet.Software{
|
||
Name: "redhat.vscode-xml",
|
||
Source: "vscode_extensions",
|
||
Version: "0.26.1",
|
||
Vendor: "Red Hat",
|
||
},
|
||
cpe: `cpe:2.3:a:redhat:vscode-xml:0.26.1:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
*/
|
||
{
|
||
software: fleet.Software{
|
||
Name: "github.vscode-pull-request-github",
|
||
Source: "vscode_extensions",
|
||
Version: "0.82.0",
|
||
Vendor: "GitHub",
|
||
},
|
||
cpe: `cpe:2.3:a:github:pull_requests_and_issues:0.82.0:*:*:*:*:visual_studio_code:*:*`,
|
||
},
|
||
{
|
||
// Running SELECT * FROM cpe_2 WHERE target_sw LIKE '%visual_studio_code%' AND product LIKE
|
||
// '%go%’; on the CPE sqlite db from NVD returned no rows containing "golang.go", or even “go”
|
||
// at all, indicating as of 10/3/25 there are no known CVEs in this extension, meaning
|
||
// it’s safe to skip matching this SW name to avoid the very broad match glob,
|
||
// cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*, provided by NVD
|
||
software: fleet.Software{
|
||
Name: "golang.go",
|
||
Source: "vscode_extensions",
|
||
Version: "0.50.0",
|
||
}, cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Google Chrome Helper.app",
|
||
Source: "apps",
|
||
Version: "111.0.5563.64",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.google.Chrome.helper",
|
||
},
|
||
// DO NOT MATCH with Google Chrome
|
||
cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Acrobat Uninstaller.app",
|
||
Source: "apps",
|
||
Version: "6.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.adobe.Acrobat.Uninstaller",
|
||
},
|
||
// DO NOT MATCH with Adobe Acrobat
|
||
cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "UmbrellaMenu.app",
|
||
Source: "apps",
|
||
Version: "1.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "com.cisco.umbrella.menu.UmbrellaMenu",
|
||
},
|
||
// DO NOT MATCH with Cisco Umbrella
|
||
cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "python@3.9",
|
||
Source: "homebrew_packages",
|
||
Version: "3.9.18_2",
|
||
Vendor: "",
|
||
},
|
||
cpe: `cpe:2.3:a:microsoft:python:3.9.18_2:*:*:*:*:macos:*:*`,
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "linux-image-5.4.0-105-custom",
|
||
Source: "deb_packages",
|
||
Version: "5.4.0-105.118",
|
||
Vendor: "",
|
||
},
|
||
cpe: "cpe:2.3:o:linux:linux_kernel:5.4.0-105.118:*:*:*:*:*:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "VirtualBox.app",
|
||
Source: "apps",
|
||
Version: "7.0.12",
|
||
BundleIdentifier: "org.virtualbox.app.VirtualBox",
|
||
},
|
||
cpe: "cpe:2.3:a:oracle:virtualbox:7.0.12:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "gh",
|
||
Source: "deb_packages",
|
||
Version: "2.61.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:github:cli:2.61.0:*:*:*:*:*:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "gh",
|
||
Source: "homebrew_packages",
|
||
Version: "2.61.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:github:cli:2.61.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "vault",
|
||
Source: "homebrew_packages",
|
||
Version: "1.4.0",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:hashicorp:vault:1.4.0:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "pass",
|
||
Source: "homebrew_packages",
|
||
Version: "1.7.4",
|
||
Vendor: "",
|
||
BundleIdentifier: "",
|
||
}, cpe: "cpe:2.3:a:simple_password_store_project:simple_password_store:1.7.4:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Source: "programs",
|
||
Version: "25.1.861.0",
|
||
}, cpe: "cpe:2.3:a:cloudflare:warp:2025.1.861.0:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft Teams.app",
|
||
Source: "apps",
|
||
// Should not be mutated
|
||
Version: "25016.1904.3401.2239",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:teams:25016.1904.3401.2239:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Microsoft Teams.app",
|
||
Source: "apps",
|
||
// Should be mutated
|
||
Version: "1.00.622155",
|
||
},
|
||
cpe: "cpe:2.3:a:microsoft:teams:1.6.00.22155:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace.app",
|
||
Source: "apps",
|
||
Version: "24.11.10",
|
||
},
|
||
cpe: "cpe:2.3:a:citrix:workspace:2411.10:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "minio",
|
||
Source: "homebrew_packages",
|
||
Version: "RELEASE.2025-02-28T09-55-16Z_1",
|
||
},
|
||
cpe: "cpe:2.3:a:minio:minio:2025-02-28T09-55-16Z:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "minio",
|
||
Source: "homebrew_packages",
|
||
Version: "20200310000000",
|
||
},
|
||
cpe: "cpe:2.3:a:minio:minio:2020-03-10T00-00-00Z:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "dify",
|
||
Source: "npm_packages",
|
||
Version: "0.11.0",
|
||
},
|
||
cpe: "cpe:2.3:a:langgenius:dify:0.11.0:*:*:*:*:node.js:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "undici",
|
||
Source: "npm_packages",
|
||
Version: "5.22.1",
|
||
},
|
||
cpe: "cpe:2.3:a:nodejs:undici:5.22.1:*:*:*:*:node.js:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "vite",
|
||
Source: "npm_packages",
|
||
Version: "4.3.9",
|
||
},
|
||
cpe: "cpe:2.3:a:vitejs:vite:4.3.9:*:*:*:*:node.js:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "directus",
|
||
Source: "npm_packages",
|
||
Version: "9.12.2",
|
||
},
|
||
cpe: "cpe:2.3:a:monospace:directus:9.12.2:*:*:*:*:node.js:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "iTerm2",
|
||
Source: "apps",
|
||
Version: "3.5.14",
|
||
BundleIdentifier: "com.googlecode.iterm2",
|
||
},
|
||
cpe: "cpe:2.3:a:iterm2:iterm2:3.5.14:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "iTerm2ImportStatus",
|
||
Source: "apps",
|
||
Version: "1.0",
|
||
BundleIdentifier: "com.googlecode.iterm2.iTerm2ImportStatus",
|
||
},
|
||
cpe: "", // Skip iTerm2ImportStatus since it is part of iTerm2 and doesn't have its own cpe
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Firefox.app",
|
||
Source: "apps",
|
||
Version: "137.0.2",
|
||
},
|
||
cpe: "cpe:2.3:a:mozilla:firefox:137.0.2:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Firefox ESR.app",
|
||
Source: "apps",
|
||
Version: "128.14.0",
|
||
},
|
||
cpe: "cpe:2.3:a:mozilla:firefox:128.14.0:*:*:*:esr:macos:*:*",
|
||
},
|
||
{
|
||
// confirmed that as of Oct. 6 '25 there is no CPE and therefore no CVEs for this software in
|
||
// the NVD db, so safe to skip checking for one
|
||
software: fleet.Software{
|
||
Name: "Logi Bolt",
|
||
BundleIdentifier: "com.logi.bolt.app",
|
||
Source: "apps",
|
||
Version: "1.2",
|
||
},
|
||
cpe: "",
|
||
},
|
||
{
|
||
software: fleet.Software{
|
||
Name: "Snyk Security - Code, Open Source, Container, IaC Configurations",
|
||
Source: "jetbrains_plugins",
|
||
Version: "2.4.9",
|
||
},
|
||
cpe: "cpe:2.3:a:snyk:snyk_security:2.4.9:*:*:*:*:intellij:*:*",
|
||
},
|
||
}
|
||
|
||
// NVD_TEST_CPEDB_PATH can be used to speed up development (sync cpe.sqlite only once).
|
||
dbPath := os.Getenv("NVD_TEST_CPEDB_PATH")
|
||
if dbPath == "" {
|
||
nettest.Run(t)
|
||
tempDir := t.TempDir()
|
||
err := DownloadCPEDBFromGithub(tempDir, "")
|
||
require.NoError(t, err)
|
||
dbPath = filepath.Join(tempDir, "cpe.sqlite")
|
||
} else {
|
||
require.FileExists(t, dbPath)
|
||
t.Logf("Using %s as database file", dbPath)
|
||
}
|
||
|
||
db, err := sqliteDB(dbPath)
|
||
require.NoError(t, err)
|
||
|
||
cpeTranslationsPath := filepath.Join(".", cpeTranslationsFilename)
|
||
cpeTranslations, err := loadCPETranslations(cpeTranslationsPath)
|
||
require.NoError(t, err)
|
||
|
||
reCache := newRegexpCache()
|
||
|
||
for _, tt := range testCases {
|
||
tt := tt
|
||
cpe, err := CPEFromSoftware(t.Context(), slog.New(slog.DiscardHandler), db, &tt.software, cpeTranslations, reCache)
|
||
|
||
translation, okT, _ := cpeTranslations.Translate(reCache, &tt.software)
|
||
if okT {
|
||
if len(translation.SWEdition) == 0 || translation.SWEdition[0] == "" {
|
||
re := regexp.MustCompile(`\*:[^*]+:[^*]+:\*:\*$`)
|
||
assert.False(t, re.MatchString(cpe), "did not expect sw_edition for:"+cpe)
|
||
}
|
||
}
|
||
|
||
require.NoError(t, err)
|
||
assert.Equal(t, tt.cpe, cpe, tt.software.Name)
|
||
}
|
||
}
|
||
|
||
func TestCPEVendorMatchesSoftware(t *testing.T) {
|
||
tests := []struct {
|
||
name string
|
||
cpeVendor string
|
||
softwareVendor string
|
||
want bool
|
||
}{
|
||
{
|
||
name: "CPE vendor appears in software vendor",
|
||
cpeVendor: "linecorp",
|
||
softwareVendor: "linecorp inc",
|
||
want: true,
|
||
},
|
||
{
|
||
name: "CPE vendor does not appear in software vendor",
|
||
cpeVendor: "ge",
|
||
softwareVendor: "linecorp inc",
|
||
want: false,
|
||
},
|
||
{
|
||
name: "software vendor is empty",
|
||
cpeVendor: "linecorp",
|
||
softwareVendor: "",
|
||
want: false,
|
||
},
|
||
{
|
||
name: "CPE vendor appears in software vendor case-insensitive",
|
||
cpeVendor: "python",
|
||
softwareVendor: "Python Software Foundation",
|
||
want: true,
|
||
},
|
||
}
|
||
for _, tt := range tests {
|
||
t.Run(tt.name, func(t *testing.T) {
|
||
item := &IndexedCPEItem{Vendor: tt.cpeVendor}
|
||
sw := &fleet.Software{Vendor: tt.softwareVendor}
|
||
assert.Equal(t, tt.want, cpeVendorMatchesSoftware(item, sw))
|
||
})
|
||
}
|
||
}
|
||
|
||
func TestContainsNonASCII(t *testing.T) {
|
||
testCases := []struct {
|
||
input string
|
||
expected bool
|
||
}{
|
||
{"hello", false},
|
||
{"hello world", false},
|
||
{"hello – world!", false},
|
||
{"😊👍", true},
|
||
{"hello world! 😊👍", true},
|
||
{"Девушка Фонарём", true},
|
||
}
|
||
|
||
for _, tc := range testCases {
|
||
assert.Equal(t, tc.expected, containsNonASCII(tc.input))
|
||
}
|
||
}
|
||
|
||
func TestMutateSoftware(t *testing.T) {
|
||
for _, tc := range []struct {
|
||
name string
|
||
s *fleet.Software
|
||
sanitized *fleet.Software
|
||
}{
|
||
{
|
||
name: "Microsoft Teams.app on macOS",
|
||
s: &fleet.Software{
|
||
Name: "Microsoft Teams.app",
|
||
Source: "apps",
|
||
Version: "1.00.622155",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Microsoft Teams.app",
|
||
Source: "apps",
|
||
Version: "1.6.00.22155",
|
||
},
|
||
},
|
||
{
|
||
name: "Microsoft Teams not on macOS",
|
||
s: &fleet.Software{
|
||
Name: "Microsoft Teams",
|
||
Source: "programs",
|
||
Version: "1.6.00.22378",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Microsoft Teams",
|
||
Source: "programs",
|
||
Version: "1.6.00.22378",
|
||
},
|
||
},
|
||
{
|
||
name: "Other.app on macOS",
|
||
s: &fleet.Software{
|
||
Name: "Other.app",
|
||
Version: "1.2.3",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Other.app",
|
||
Version: "1.2.3",
|
||
},
|
||
},
|
||
{
|
||
name: "Cloudflare WARP on Windows, version not using full year",
|
||
s: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "23.9.248.0",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "2023.9.248.0",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Cloudflare WARP on Windows, version using full year",
|
||
s: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "2023.9.248.0",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "2023.9.248.0",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Cloudflare WARP on Windows with invalid version",
|
||
s: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "foobar",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "foobar",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Cloudflare WARP on Windows with invalid version",
|
||
s: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "foo.bar",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Cloudflare WARP",
|
||
Version: "foo.bar",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Other on Windows",
|
||
s: &fleet.Software{
|
||
Name: "Other",
|
||
Version: "1.2.3",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Other",
|
||
Version: "1.2.3",
|
||
},
|
||
},
|
||
{
|
||
name: "Citrix Workspace on Windows",
|
||
s: &fleet.Software{
|
||
Name: "Citrix Workspace 2309",
|
||
Version: "23.9.1.104",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Citrix Workspace 2309",
|
||
Version: "2309.1.104",
|
||
},
|
||
},
|
||
{
|
||
name: "Citrix Workspace on Mac",
|
||
s: &fleet.Software{
|
||
Name: "Citrix Workspace.app",
|
||
Version: "23.9.1.104",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Citrix Workspace.app",
|
||
Version: "2309.1.104",
|
||
},
|
||
},
|
||
{
|
||
name: "Citrix Workspace with correct versioning",
|
||
s: &fleet.Software{
|
||
Name: "Citrix Workspace.app",
|
||
Version: "2400.1.104",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Citrix Workspace.app",
|
||
Version: "2400.1.104",
|
||
},
|
||
},
|
||
{
|
||
name: "MS Teams classic on MacOS",
|
||
s: &fleet.Software{
|
||
Name: "Microsoft Teams classic.app",
|
||
Source: "apps",
|
||
Version: "1.00.634263",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Microsoft Teams classic.app",
|
||
Source: "apps",
|
||
Version: "1.6.00.34263",
|
||
},
|
||
},
|
||
{
|
||
name: "minio",
|
||
s: &fleet.Software{
|
||
Name: "minio",
|
||
Version: "RELEASE.2022-03-10T00-00-00Z",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "minio",
|
||
Version: "2022-03-10T00-00-00Z",
|
||
},
|
||
},
|
||
{
|
||
name: "minio",
|
||
s: &fleet.Software{
|
||
Name: "minio",
|
||
Version: "20200310000000",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "minio",
|
||
Version: "2020-03-10T00-00-00Z",
|
||
},
|
||
},
|
||
{
|
||
name: "minio with trailing garbage",
|
||
s: &fleet.Software{
|
||
Name: "minio",
|
||
Version: "RELEASE.2022-03-10T00-00-00Z_1",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "minio",
|
||
Version: "2022-03-10T00-00-00Z",
|
||
},
|
||
},
|
||
{
|
||
name: "JetBrains non-EAP",
|
||
s: &fleet.Software{
|
||
Name: "GoLand.app",
|
||
Version: "2024.3.1",
|
||
BundleIdentifier: "com.jetbrains.goland",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "GoLand.app",
|
||
Version: "2024.3.1",
|
||
BundleIdentifier: "com.jetbrains.goland",
|
||
},
|
||
},
|
||
{
|
||
name: "JetBrains EAP",
|
||
s: &fleet.Software{
|
||
Name: "GoLand.app",
|
||
Source: "apps",
|
||
Version: "EAP GO-243.21565.42",
|
||
BundleIdentifier: "com.jetbrains.goland-EAP",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "GoLand.app",
|
||
Source: "apps",
|
||
Version: "2024.2.99.21565.42",
|
||
BundleIdentifier: "com.jetbrains.goland-EAP",
|
||
},
|
||
},
|
||
{
|
||
name: "JetBrains year-wrapped EAP",
|
||
s: &fleet.Software{
|
||
Name: "IntelliJ IDEA CE",
|
||
Version: "EAP IC-241.12345.67",
|
||
BundleIdentifier: "com.jetbrains.intellij-EAP",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "IntelliJ IDEA CE",
|
||
Version: "2023.4.99.12345.67",
|
||
BundleIdentifier: "com.jetbrains.intellij-EAP",
|
||
},
|
||
},
|
||
{
|
||
name: "Python for Windows GA dot-zero",
|
||
s: &fleet.Software{
|
||
Name: "Python 3.12 (64-bit)",
|
||
Version: "3.12.150.1013",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Python 3.12 (64-bit)",
|
||
Version: "3.12.0",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Python for Windows GA patch release",
|
||
s: &fleet.Software{
|
||
Name: "Python 3.12.8 (64-bit)",
|
||
Version: "3.12.8150.0",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Python 3.12.8 (64-bit)",
|
||
Version: "3.12.8",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Python for Windows alpha",
|
||
s: &fleet.Software{
|
||
Name: "Python 3.14.0a4 (64-bit)",
|
||
Version: "3.14.104.1013",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Python 3.14.0a4 (64-bit)",
|
||
Version: "3.14.0a4",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Python for Windows beta",
|
||
s: &fleet.Software{
|
||
Name: "Python 3.14.0b3 (64-bit)",
|
||
Version: "3.14.113.1013",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Python 3.14.0b3 (64-bit)",
|
||
Version: "3.14.0b3",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Python for Windows RC",
|
||
s: &fleet.Software{
|
||
Name: "Python 3.14.0rc2 (64-bit)",
|
||
Version: "3.14.122.1013",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "Python 3.14.0rc2 (64-bit)",
|
||
Version: "3.14.0rc2",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "MacVim with known Vim version (9.0.1897 -> 178)",
|
||
s: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.0.1897",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "178",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
},
|
||
{
|
||
name: "MacVim with known Vim version (9.1.0 -> 179)",
|
||
s: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.1.0",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "179",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
},
|
||
{
|
||
name: "MacVim with prerelease Vim version (9.1.1577 -> 181.2)",
|
||
s: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.1.1577",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "181.2",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
},
|
||
{
|
||
name: "MacVim with unknown Vim version (leaves as-is)",
|
||
s: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.2.9999",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.2.9999",
|
||
Source: "apps",
|
||
BundleIdentifier: "org.vim.MacVim",
|
||
},
|
||
},
|
||
{
|
||
name: "MacVim from wrong source (not transformed)",
|
||
s: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.0.1897",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "MacVim",
|
||
Version: "9.0.1897",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Homebrew imp (Integrative Modeling Platform)",
|
||
s: &fleet.Software{
|
||
Name: "imp",
|
||
Version: "2.23.0_13",
|
||
Source: "homebrew_packages",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "integrative-modeling-platform",
|
||
Version: "2.23.0_13",
|
||
Source: "homebrew_packages",
|
||
},
|
||
},
|
||
{
|
||
name: "imp from non-Homebrew source (should not be renamed)",
|
||
s: &fleet.Software{
|
||
Name: "imp",
|
||
Version: "5.0.22",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "imp",
|
||
Version: "5.0.22",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
{
|
||
name: "Homebrew imp with different version",
|
||
s: &fleet.Software{
|
||
Name: "imp",
|
||
Version: "2.20.0",
|
||
Source: "homebrew_packages",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "integrative-modeling-platform",
|
||
Version: "2.20.0",
|
||
Source: "homebrew_packages",
|
||
},
|
||
},
|
||
{
|
||
name: "ninxsoft Mist (macOS installer download tool)",
|
||
s: &fleet.Software{
|
||
Name: "Mist",
|
||
Version: "0.30",
|
||
Source: "apps",
|
||
BundleIdentifier: "com.ninxsoft.mist",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "ninxsoft-mist",
|
||
Version: "0.30",
|
||
Source: "apps",
|
||
BundleIdentifier: "com.ninxsoft.mist",
|
||
},
|
||
},
|
||
{
|
||
name: "7-Zip on Windows with four-part MSI version",
|
||
s: &fleet.Software{
|
||
Name: "7-Zip 24.09 (x64)",
|
||
Version: "24.09.00.0",
|
||
Source: "programs",
|
||
},
|
||
sanitized: &fleet.Software{
|
||
Name: "7-Zip 24.09 (x64)",
|
||
Version: "24.09",
|
||
Source: "programs",
|
||
},
|
||
},
|
||
} {
|
||
t.Run(tc.name, func(t *testing.T) {
|
||
require.NotPanics(t, func() { mutateSoftware(t.Context(), tc.s, slog.New(slog.DiscardHandler)) })
|
||
require.Equal(t, tc.sanitized, tc.s)
|
||
})
|
||
}
|
||
}
|
||
|
||
func TestCitrixWorkspaceLTSR(t *testing.T) {
|
||
item := &IndexedCPEItem{
|
||
Product: "workspace",
|
||
Vendor: "citrix",
|
||
}
|
||
|
||
for _, tc := range []struct {
|
||
name string
|
||
software fleet.Software
|
||
wantCPE string
|
||
}{
|
||
{
|
||
name: "Citrix Workspace 2203 LTSR on Windows",
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace 2203",
|
||
Version: "22.3.1.41",
|
||
Source: "programs",
|
||
Vendor: "Citrix Systems, Inc.",
|
||
},
|
||
wantCPE: "cpe:2.3:a:citrix:workspace:2203.1.41:*:*:*:ltsr:windows:*:*",
|
||
},
|
||
{
|
||
name: "Citrix Workspace 2402 LTSR on Windows",
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace 2402",
|
||
Version: "24.2.0.65",
|
||
Source: "programs",
|
||
Vendor: "Citrix Systems, Inc.",
|
||
},
|
||
wantCPE: "cpe:2.3:a:citrix:workspace:2402.0.65:*:*:*:ltsr:windows:*:*",
|
||
},
|
||
{
|
||
name: "Citrix Workspace non-LTSR on Windows",
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace 2309",
|
||
Version: "23.9.1.104",
|
||
Source: "programs",
|
||
Vendor: "Citrix Systems, Inc.",
|
||
},
|
||
wantCPE: "cpe:2.3:a:citrix:workspace:2309.1.104:*:*:*:*:windows:*:*",
|
||
},
|
||
{
|
||
name: "Citrix Workspace LTSR version on Mac (not programs source)",
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace.app",
|
||
Version: "24.2.0.65",
|
||
Source: "apps",
|
||
Vendor: "Citrix Systems, Inc.",
|
||
},
|
||
wantCPE: "cpe:2.3:a:citrix:workspace:2402.0.65:*:*:*:*:macos:*:*",
|
||
},
|
||
{
|
||
name: "Citrix Workspace 1912 LTSR on Windows",
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace 1912",
|
||
Version: "19.12.0.5",
|
||
Source: "programs",
|
||
Vendor: "Citrix Systems, Inc.",
|
||
},
|
||
wantCPE: "cpe:2.3:a:citrix:workspace:1912.0.5:*:*:*:ltsr:windows:*:*",
|
||
},
|
||
{
|
||
name: "Citrix Workspace 2507.1 LTSR on Windows",
|
||
software: fleet.Software{
|
||
Name: "Citrix Workspace 2507",
|
||
Version: "25.7.1.50",
|
||
Source: "programs",
|
||
Vendor: "Citrix Systems, Inc.",
|
||
},
|
||
wantCPE: "cpe:2.3:a:citrix:workspace:2507.1.50:*:*:*:ltsr:windows:*:*",
|
||
},
|
||
} {
|
||
t.Run(tc.name, func(t *testing.T) {
|
||
mutateSoftware(t.Context(), &tc.software, slog.New(slog.DiscardHandler))
|
||
got := item.FmtStr(&tc.software)
|
||
require.Equal(t, tc.wantCPE, got)
|
||
})
|
||
}
|
||
}
|