From 2825e1105d456787bcb493eb880ab8bc9b0db8f6 Mon Sep 17 00:00:00 2001 From: Brendan McDevitt Date: Fri, 20 May 2022 15:27:16 -0500 Subject: [PATCH] showcase example of captured data potential. this is what we will fill for each CNA --- doc/cna_readme_notes/cnas_with_html_advisories.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/cna_readme_notes/cnas_with_html_advisories.md b/doc/cna_readme_notes/cnas_with_html_advisories.md index 864995e..e33963c 100644 --- a/doc/cna_readme_notes/cnas_with_html_advisories.md +++ b/doc/cna_readme_notes/cnas_with_html_advisories.md @@ -170,5 +170,11 @@ https://www.elastic.co/community/security HTML table index has everything. cve-id links to mitre. ESA-ID, CVE, Date Disclosed, Vulnerability Summary, Remediation Summary #### Captured Data Potential From Advisory ``` -captured_keys = { :esa_id, :cve, :date_disclosed, :vulnerability_summary, :remediation_summary } +{ + :esa_id => "ESA-2021-09", + :cve => "CVE-2021-22138", + :date_disclosed => "2021-03-23", + :vulnerability_summary => "A TLS certificate validation flaw was found in the monitoring feature of Logstash versions 6.4.0 and before versions 6.8.15 and 7.12.0. When specifying a trusted server CA certificate Logstash would not properly verify the certificate returned by the monitoring server. This could result in a man in the middle style attack against the Logstash monitoring data.", + :remediation_summary => "Users should update their version of Logstash to 7.12.0 or 6.8.15." +} ``` \ No newline at end of file