openscap
openscap copied to clipboard
bringing oscap up to speed with NVD
Description of Problem:
Thanks for taking time to read this.
Multiple functionalities for oscap are not up to speed with the current state of things
module CVE does not process JSON when XML feeds were abandoned in 2019 module CVSS does not support CVSS3 strings when both 3.0 and 3.1 are commonly used it must be safe to assume other features may also require a fresh up
OpenSCAP Version:
OpenSCAP command line tool (oscap) 1.3.5
Operating System & Version:
Linux
Steps to Reproduce:
- run oscap with CVE command such as find with a JSON feed or with an XML from https://cve.mitre.org/data/downloads/index.html
- run oscal with CVSS command such as score or desribe with a CVSS3 string
- more ?
Actual Results:
doesn't work