fleet/server/vulnerabilities/nvd/cpe_translations.json
Ian Littman 51dcf80df7
Add bundle ID based CPE product matching for more JetBrains macOS products (#25234)
For #22723.

Bundle IDs pulled from installs of the software, with regexes being
starts-with matches to include EAPs in matches. Used the products list
from CVE-2024-37051 to match up NVD product names (which is why
Writerside isn't included here; it doesn't have any published vulns
yet).

This fixes vuln detection in e.g. GoLand EAPs when the app name is
something other than the product name, similar to what we've done with
IntelliJ and PyCharm (but omitting homebrew handling for now).

No changes file as this doesn't need to be cherry-picked, and it will go
out in the next NVD pull after merged to `main`.

# Checklist for submitter
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-01-08 08:40:46 -06:00

549 lines
No EOL
10 KiB
JSON

[
{
"software": {
"bundle_identifier": ["us.zoom.xos"],
"source": ["apps"]
},
"filter": {
"product": ["zoom", "meetings"],
"vendor": ["zoom"],
"target_sw": ["macos", "mac_os"]
}
},
{
"software": {
"name": ["/^ruby(@.*)?$/"],
"source": ["homebrew_packages"]
},
"filter": {
"product": ["ruby"],
"vendor": ["ruby-lang"]
}
},
{
"software": {
"name": ["/^node(@.*)?$/"],
"source": ["homebrew_packages"]
},
"filter": {
"product": ["node.js"],
"vendor": ["nodejs"]
}
},
{
"software": {
"name": ["/1Password/"],
"source": ["apps"]
},
"filter": {
"product": ["1password"],
"vendor": ["1password"]
}
},
{
"software": {
"name": ["/Node\\.js/"],
"source": ["programs"]
},
"filter": {
"product": ["node.js"],
"vendor": ["nodejs"]
}
},
{
"software": {
"name": ["/7-Zip/"],
"source": ["programs"]
},
"filter": {
"product": ["7-zip"],
"vendor": ["7-zip"]
}
},
{
"software": {
"name": ["Docs"],
"source": ["chrome_extensions"]
},
"filter": {
"skip": true
}
},
{
"software": {
"bundle_identifier": [
"/(?i)com\\.microsoft\\.(powerpoint|word|excel|onenote|outlook)/"
],
"source": ["apps"]
},
"filter": {
"skip": true
}
},
{
"software": {
"bundle_identifier": [
"/(?i)(com\\.docker\\.docker|com\\.electron\\.dockerdesktop|com\\.electron\\.docker-frontend)/"
],
"source": ["apps"]
},
"filter": {
"product": ["docker_desktop"],
"vendor": ["docker"]
}
},
{
"software": {
"name": ["docker"],
"source": ["python_packages"]
},
"filter": {
"skip": true
}
},
{
"software": {
"name": ["flock"],
"source": ["homebrew_packages"]
},
"filter": {
"skip": true
}
},
{
"software": {
"name": ["Flock.app"],
"source": ["apps"]
},
"filter": {
"product": ["flock"],
"vendor": ["flock"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.intellij/"],
"source": ["apps"]
},
"filter": {
"product": ["intellij_idea"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"name": ["/^intellij-idea(-ce)?$/"],
"source": ["homebrew_packages"]
},
"filter": {
"product": ["intellij_idea"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.pycharm/"],
"source": ["apps"]
},
"filter": {
"product": ["pycharm"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"name": ["/^pycharm(-ce)?$/"],
"source": ["homebrew_packages"]
},
"filter": {
"product": ["pycharm"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.PhpStorm/"],
"source": ["apps"]
},
"filter": {
"product": ["phpstorm"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.aqua/"],
"source": ["apps"]
},
"filter": {
"product": ["aqua"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.CLion/"],
"source": ["apps"]
},
"filter": {
"product": ["clion"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.datagrip/"],
"source": ["apps"]
},
"filter": {
"product": ["datagrip"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.dataspell/"],
"source": ["apps"]
},
"filter": {
"product": ["dataspell"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.goland/"],
"source": ["apps"]
},
"filter": {
"product": ["goland"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.rider/"],
"source": ["apps"]
},
"filter": {
"product": ["rider"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.rubymine/"],
"source": ["apps"]
},
"filter": {
"product": ["rubymine"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.rustrover/"],
"source": ["apps"]
},
"filter": {
"product": ["rustrover"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.WebStorm/"],
"source": ["apps"]
},
"filter": {
"product": ["webstorm"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"bundle_identifier": ["/^com\\.jetbrains\\.mps/"],
"source": ["apps"]
},
"filter": {
"product": ["mps"],
"vendor": ["jetbrains"]
}
},
{
"software": {
"name": ["ms-python.python"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["python_extension"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-vsliveshare.vsliveshare"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["visual_studio_live_share"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["dbaeumer.vscode-eslint"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["visual_studio_code_eslint_extension"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-vscode.powershell"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["powershell_extension"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-vscode-remote.vscode-remote-extensionpack"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["remote_development"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["vknabel.vscode-swiftlint"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["swiftlint"],
"vendor": ["swiftlint_project"]
}
},
{
"software": {
"name": ["vknabel.vscode-swiftformat"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["swiftformat"],
"vendor": ["swiftformat_project"]
}
},
{
"software": {
"name": ["jbenden.c-cpp-flylint"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["c\\/c\\+\\+_advanced_lint"],
"vendor": ["c\\/c\\+\\+_advanced_lint_project"]
}
},
{
"software": {
"name": ["stripe.vscode-stripe"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["stripe"],
"vendor": ["stripe"]
}
},
{
"software": {
"name": ["vscodevim.vim"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["vim"],
"vendor": ["vim_project"]
}
},
{
"software": {
"name": ["svelte.svelte-vscode"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["svelte"],
"vendor": ["svelte"]
}
},
{
"software": {
"name": ["ms-vscode-remote.remote-containers"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["remote"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-kubernetes-tools.vscode-kubernetes-tools"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["kubernetes_tools"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-dotnettools.vscode-dotnet-sdk"],
"source": ["vscode_extensions"]
},
"filter": {
"product": [".net_education_bundle_sdk_install_tool"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-dotnettools.vscode-dotnet-runtime"],
"source": ["vscode_extensions"]
},
"filter": {
"product": [".net_install_tool_for_extension_authors"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["ms-vscode-remote.remote-wsl"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["windows_subsystem_for_linux"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["mongodb.mongodb-vscode"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["mongodb"],
"vendor": ["mongodb"]
}
},
{
"software": {
"name": ["oracle.mysql-shell-for-vs-code"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["mysql_shell"],
"vendor": ["oracle"]
}
},
{
"software": {
"name": ["snyk-security.snyk-vulnerability-scanner"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["snyk_security"],
"vendor": ["snyk"]
}
},
{
"software": {
"name": ["sourcegraph.cody-ai"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["cody"],
"vendor": ["sourcegraph"]
}
},
{
"software": {
"name": ["github.vscode-pull-request-github"],
"source": ["vscode_extensions"]
},
"filter": {
"product": ["pull_requests_and_issues"],
"vendor": ["github"]
}
},
{
"software": {
"name": ["Microsoft Edge"],
"source": ["programs", "apps"]
},
"filter": {
"product": ["edge_chromium"],
"vendor": ["microsoft"]
}
},
{
"software": {
"name": ["Steam"],
"source": ["programs"]
},
"filter": {
"skip": true
}
},
{
"software": {
"name": ["Steam.app"],
"source": ["apps"]
},
"filter": {
"skip": true
}
},
{
"software": {
"name": ["/^linux-image\\.*/"]
},
"filter": {
"product": ["linux_kernel"],
"vendor": ["linux"],
"part": "o"
}
},
{
"software": {
"name": ["git"],
"source": ["homebrew_packages"]
},
"filter": {
"product": ["git"],
"vendor": ["git"]
}
},
{
"software": {
"bundle_identifier": ["org.virtualbox.app.VirtualBox"]
},
"filter": {
"product": ["virtualbox"],
"vendor": ["oracle"]
}
},
{
"software": {
"name": ["gh"]
},
"filter": {
"product": ["cli"],
"vendor": ["github"]
}
}
]