Ignore iOS-only Firefox vulnerability (CVE-2024-10004) since we don't support iOS vulns (#24892)

For #23579

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

QA'd locally successfully. It just took a bit longer for the vuln showed
up.
This commit is contained in:
Ian Littman
2024-12-19 14:05:58 -06:00
committed by GitHub
parent 5f9fcfc9f4
commit 4f547902a6
3 changed files with 7 additions and 0 deletions
@@ -0,0 +1 @@
* Fixed CVE-2024-10004 false positive on Fleet-supported platforms (vuln is iOS-only and iOS vuln checking is not supported)
@@ -249,6 +249,8 @@ func GetKnownNVDBugRules() (CPEMatchingRules, error) {
return cpeMeta.TargetSW != "windows"
},
},
// CVE-2024-10004 only targets iOS, and we don't yet support iOS vuln scanning (and can't tell iOS/Mac CPEs apart yet)
CPEMatchingRule{CVEs: map[string]struct{}{"CVE-2024-10004": {}}, IgnoreAll: true},
}
for i, rule := range rules {
+4
View File
@@ -359,6 +359,10 @@ func TestTranslateCPEToCVE(t *testing.T) {
},
continuesToUpdate: true,
},
"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*": {
excludedCVEs: []string{"CVE-2024-10004"},
continuesToUpdate: true,
},
}
cveOSTests := []struct {