🎉 add tenable plugin to reference #11127

[manuel-sommer]

closes #11127

[dryrunsecurity]

DryRun Security Summary

The pull request enhances the TenableCSVParser class by adding more reference information to the Finding object and adds a new test case to the TestTenableParser class to ensure the correct extraction of reference information for the "SWEET32" vulnerability.

Expand for full summary

Summary:

The code changes in this pull request are focused on enhancing the functionality of the TenableCSVParser class in the dojo/tools/tenable/csv_format.py file and adding a new test case to the TestTenableParser class in the unittests/tools/test_tenable_parser.py file.

The changes to the TenableCSVParser class are adding additional information to the references field of the Finding object, including the Tenable plugin ID, plugin publication date, and plugin modification date. This additional information can be useful for security analysts and researchers to better understand the context and history of the finding.

The new test case, test_parse_issue_11127, ensures that the TenableParser class correctly extracts the relevant reference information for the "SWEET32" vulnerability (CVE-2016-2183), which is a cryptographic attack that can be used to break encryption when using 64-bit block ciphers, such as Triple-DES. This test case helps to maintain the reliability and accuracy of the Tenable parser implementation.

Files Changed:

1. dojo/tools/tenable/csv_format.py:

   • The changes in this file are related to the TenableCSVParser class, where additional information is being added to the references field of the Finding object, including the Tenable plugin ID, plugin publication date, and plugin modification date.
   • This additional information can be useful for security analysts and researchers to better understand the context and history of the finding.

2. unittests/tools/test_tenable_parser.py:

   • The changes in this file are related to the addition of a new test case, test_parse_issue_11127, in the TestTenableParser class.
   • The test case ensures that the TenableParser class correctly extracts the relevant reference information for the "SWEET32" vulnerability (CVE-2016-2183), which is a cryptographic attack that can be used to break encryption when using 64-bit block ciphers, such as Triple-DES.
   • This test case helps to maintain the reliability and accuracy of the Tenable parser implementation.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved