org.owasp.dependencycheck.dependency.CvssV2 Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of dependency-check-core Show documentation
Show all versions of dependency-check-core Show documentation
dependency-check-core is the engine and reporting tool used to identify and report if there are any known, publicly disclosed vulnerabilities in the scanned project's dependencies. The engine extracts meta-data from the dependencies and uses this to do fuzzy key-word matching against the Common Platfrom Enumeration (CPE), if any CPE identifiers are found the associated Common Vulnerability and Exposure (CVE) entries are added to the generated report.
/*
* This file is part of dependency-check-core.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
* Copyright (c) 2018 Jeremy Long. All Rights Reserved.
*/
package org.owasp.dependencycheck.dependency;
import java.io.Serializable;
/**
* CVSS V2 scoring information.
*
* @author Jeremy Long
*/
public class CvssV2 implements Serializable {
/**
* Serial version UID.
*/
private static final long serialVersionUID = -2203955879356702367L;
/**
* CVSS Score.
*/
private final float score;
/**
* CVSS Access Vector.
*/
private final String accessVector;
/**
* CVSS Access Complexity.
*/
private final String accessComplexity;
/**
* CVSS Authentication.
*/
private final String authentication;
/**
* CVSS Confidentiality Impact.
*/
private final String confidentialityImpact;
/**
* CVSS Integrity Impact.
*/
private final String integrityImpact;
/**
* CVSS Availability Impact.
*/
private final String availabilityImpact;
/**
* CVSS severity.
*/
private final String severity;
/**
* Constructs a new CVSS V2 object.
*
* @param score the score
* @param accessVector the access vector
* @param accessComplexity the access complexity
* @param authentication the authentication
* @param confidentialityImpact the confidentiality impact
* @param integrityImpact the integrity impact
* @param availabilityImpact the availability impact
* @param severity the severity
*/
public CvssV2(float score, String accessVector, String accessComplexity, String authentication,
String confidentialityImpact, String integrityImpact, String availabilityImpact, String severity) {
this.score = score;
this.accessVector = accessVector;
this.accessComplexity = accessComplexity;
this.authentication = authentication;
this.confidentialityImpact = confidentialityImpact;
this.integrityImpact = integrityImpact;
this.availabilityImpact = availabilityImpact;
this.severity = severity;
}
/**
* Get the value of score.
*
* @return the value of score
*/
public float getScore() {
return score;
}
/**
* Get the value of accessVector.
*
* @return the value of accessVector
*/
public String getAccessVector() {
return accessVector;
}
/**
* Get the value of accessComplexity.
*
* @return the value of accessComplexity
*/
public String getAccessComplexity() {
return accessComplexity;
}
/**
* Get the value of authentication.
*
* @return the value of authentication
*/
public String getAuthentication() {
return authentication;
}
/**
* Get the value of confidentialityImpact.
*
* @return the value of confidentialityImpact
*/
public String getConfidentialityImpact() {
return confidentialityImpact;
}
/**
* Get the value of integrityImpact.
*
* @return the value of integrityImpact
*/
public String getIntegrityImpact() {
return integrityImpact;
}
/**
* Get the value of availabilityImpact.
*
* @return the value of availabilityImpact
*/
public String getAvailabilityImpact() {
return availabilityImpact;
}
/**
* Get the value of severity.
*
* @return the value of severity
*/
public String getSeverity() {
return severity;
}
@Override
public String toString() {
return String.format("/AV:%s/AC:%s/Au:%s/C:%s/I:%s/A:%s",
accessVector == null ? "" : accessVector.substring(0, 1),
accessComplexity == null ? "" : accessComplexity.substring(0, 1),
authentication == null ? "" : authentication.substring(0, 1),
confidentialityImpact == null ? "" : confidentialityImpact.substring(0, 1),
integrityImpact == null ? "" : integrityImpact.substring(0, 1),
availabilityImpact == null ? "" : availabilityImpact.substring(0, 1));
}
}