FM / api

/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/api/

/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/api

Name	Size	Mode	Actions
__pycache__/	-	0755	rm
imunify_patch_subscription.py	5512	0644	edit dl rm
vulnerability.py	3221	0644	edit dl rm
__init__.py	0	0644	edit dl rm

Edit: /opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/api/vulnerability.py (3221B)

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 
See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.

This software is also available under ImunifyAV commercial license,
see <https://www.imunify360.com/legal/eula>
"""
import logging
from collections import defaultdict
from typing import Iterable
from urllib.parse import urljoin
from urllib.request import Request

from defence360agent.api.server import API, APIError
from defence360agent.internals.iaid import (
    IAIDTokenError,
    IndependentAgentIDAPI,
)

logger = logging.getLogger(__name__)

class VulnerabilityAPI(API):
    URL = urljoin(API._BASE_URL, "/api/patch/vulnerabilities")
    _STUB_VULNERABILITY_INFO = {
        "cveId": "",
        "app": "",
        "type": "",
        "name": "",
        "severity": "",
    }

@classmethod
    async def get_details(cls, ids: Iterable) -> dict:
        """
        Get vulnerabilities details for specific *ids*.
        More details in DEF-32152
        """
        info = defaultdict(cls._STUB_VULNERABILITY_INFO.copy)
        if not ids:
            return info

try:
            token = await IndependentAgentIDAPI.get_token()
        except IAIDTokenError as exc:
            logger.error(
                "Can't get iaid token: %s. "
                "Return default vulnerabilities details.",
                exc,
            )
            return info

url = cls.URL + f"?ids={','.join(ids)}"
        request = Request(
            url,
            headers={"X-Auth": token, "Content-Type": "application/json"},
        )
        try:
            result = await cls.async_request(request)
        except APIError as exc:
            logger.error(
                "Failed to get vulnerabilities details: %s. "
                "Return default vulnerabilities details.",
                exc,
            )
            return info

info.update(normalize_vulnerabilities(result["vulnerabilities"]))
        return info

def normalize_vulnerabilities(
    vulnerabilities: dict[str, dict[str, str]],
) -> dict[str, dict[str, str]]:
    """
    Normalize vulnerabilities data.
    """
    return {
        _id: normalize_vulnerability(vulnerability)
        for _id, vulnerability in vulnerabilities.items()
    }

def normalize_vulnerability(vulnerability: dict[str, str]) -> dict[str, str]:
    """
    Normalize vulnerability data.
    """
    return {
        "cveId": vulnerability.get("cveId", ""),
        "app": vulnerability.get("app", ""),
        "type": vulnerability.get("type", ""),
        "name": vulnerability.get("name", ""),
        "severity": vulnerability.get("severity", "").upper(),
    }

""" This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . Copyright © 2019 Cloud Linux Software Inc. This software is also available under ImunifyAV commercial license, see """ import logging from collections import defaultdict from typing import Iterable from urllib.parse import urljoin from urllib.request import Request from defence360agent.api.server import API, APIError from defence360agent.internals.iaid import ( IAIDTokenError, IndependentAgentIDAPI, ) logger = logging.getLogger(__name__) class VulnerabilityAPI(API): URL = urljoin(API._BASE_URL, "/api/patch/vulnerabilities") _STUB_VULNERABILITY_INFO = { "cveId": "", "app": "", "type": "", "name": "", "severity": "", } @classmethod async def get_details(cls, ids: Iterable) -> dict: """ Get vulnerabilities details for specific *ids*. More details in DEF-32152 """ info = defaultdict(cls._STUB_VULNERABILITY_INFO.copy) if not ids: return info try: token = await IndependentAgentIDAPI.get_token() except IAIDTokenError as exc: logger.error( "Can't get iaid token: %s. " "Return default vulnerabilities details.", exc, ) return info url = cls.URL + f"?ids={','.join(ids)}" request = Request( url, headers={"X-Auth": token, "Content-Type": "application/json"}, ) try: result = await cls.async_request(request) except APIError as exc: logger.error( "Failed to get vulnerabilities details: %s. " "Return default vulnerabilities details.", exc, ) return info info.update(normalize_vulnerabilities(result["vulnerabilities"])) return info def normalize_vulnerabilities( vulnerabilities: dict[str, dict[str, str]], ) -> dict[str, dict[str, str]]: """ Normalize vulnerabilities data. """ return { _id: normalize_vulnerability(vulnerability) for _id, vulnerability in vulnerabilities.items() } def normalize_vulnerability(vulnerability: dict[str, str]) -> dict[str, str]: """ Normalize vulnerability data. """ return { "cveId": vulnerability.get("cveId", ""), "app": vulnerability.get("app", ""), "type": vulnerability.get("type", ""), "name": vulnerability.get("name", ""), "severity": vulnerability.get("severity", "").upper(), }