diff --git a/changes/25662-ij-windows b/changes/25662-ij-windows new file mode 100644 index 0000000000..54c732efbe --- /dev/null +++ b/changes/25662-ij-windows @@ -0,0 +1 @@ +* Resolved false negatives on vulnerabilities for IntelliJ IDEA Community Edition on Windows. diff --git a/server/vulnerabilities/nvd/cpe_test.go b/server/vulnerabilities/nvd/cpe_test.go index 380aa89c48..9b686d2575 100644 --- a/server/vulnerabilities/nvd/cpe_test.go +++ b/server/vulnerabilities/nvd/cpe_test.go @@ -1341,6 +1341,15 @@ func TestCPEFromSoftwareIntegration(t *testing.T) { }, cpe: "cpe:2.3:a:jetbrains:goland:2022.3.99.123.456:*:*:*:*:macos:*:*", }, + { + software: fleet.Software{ + Name: "IntelliJ IDEA Community Edition 2022.3.2", + Source: "programs", + Version: "223.8617.56", + Vendor: "", + }, + cpe: "cpe:2.3:a:jetbrains:intellij_idea:223.8617.56:*:*:*:*:windows:*:*", + }, { software: fleet.Software{ Name: "IntelliJ IDEA.app", diff --git a/server/vulnerabilities/nvd/cpe_translations.json b/server/vulnerabilities/nvd/cpe_translations.json index ee81548e5c..9bd18519d3 100644 --- a/server/vulnerabilities/nvd/cpe_translations.json +++ b/server/vulnerabilities/nvd/cpe_translations.json @@ -169,6 +169,16 @@ "vendor": ["jetbrains"] } }, + { + "software": { + "name": ["/^IntelliJ IDEA Community Edition/"], + "source": ["programs"] + }, + "filter": { + "product": ["intellij_idea"], + "vendor": ["jetbrains"] + } + }, { "software": { "bundle_identifier": ["/^com\\.jetbrains\\.pycharm/"],