Class: Aws::Continuum::Types::FindingVulnerability

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb

Overview

One vulnerability reported by a finding. A customer document may report several; each carries its own identity, locations and remediation.

Constant Summary collapse

SENSITIVE =
[]

Instance Attribute Summary collapse

Instance Attribute Details

#additional_cwe_ids ⇒ Array<String>

Further CWEs the producer attributed to this same vulnerability.

Returns:

  • (Array<String>)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#affected_packages ⇒ Array<Types::AffectedPackage>

Software packages implicated by a finding.

Returns:



1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#code ⇒ String

The vulnerable fragment, when the producer supplied one.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#cve_id ⇒ String

A CVE identifier, e.g. "CVE-2020-8203".

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#cvss_base_score ⇒ Float

The CVSS base score for cveId, when the producer supplies one, from 0.0 to 10.0.

Returns:

  • (Float)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#cwe_caption ⇒ String

The producer's human-readable caption for cweId.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#cwe_id ⇒ String

Primary CWE for this vulnerability, e.g. "CWE-89".

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#description ⇒ String

Free-form prose about a finding (summary, detailed analysis, rationale, remediation guidance). Capped well below the finding document's own 256 KB limit, since several of these can appear on one finding.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#details ⇒ String

The producer's extended analysis for this vulnerability.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#fix_coverage ⇒ String

The producer's description of how completely a fix is available.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#fix_coverage_id ⇒ Integer

The producer's enum value behind fixCoverage.

Returns:

  • (Integer)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#locations ⇒ Array<Types::FindingLocation>

Every location this vulnerability was reported at.

Returns:



1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#remediation ⇒ String

Free-form prose about a finding (summary, detailed analysis, rationale, remediation guidance). Capped well below the finding document's own 256 KB limit, since several of these can appear on one finding.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#remediation_references ⇒ Array<String>

A free-form list of strings carried verbatim from a producer.

Returns:

  • (Array<String>)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end

#title ⇒ String

The title of a finding, from the producer's own title -- OCSF finding_info.title, or the scanner's finding title. Length matches the OCSF title constraint.

Returns:

  • (String)


1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1442

class FindingVulnerability < Struct.new(
  :title,
  :description,
  :cwe_id,
  :cwe_caption,
  :additional_cwe_ids,
  :cve_id,
  :cvss_base_score,
  :fix_coverage,
  :fix_coverage_id,
  :locations,
  :remediation,
  :remediation_references,
  :code,
  :details,
  :affected_packages)
  SENSITIVE = []
  include Aws::Structure
end