Skip to content

Commit

Permalink
Change: Use case-insensitive comparison for CPEs in CVE scanner
Browse files Browse the repository at this point in the history
Because some CVEs where not found because of a different notation
(with capital letters / without capital letters) the comparison
for the CPEs in the CVE scanner is now made case-insensitive.
  • Loading branch information
jhelmold authored Oct 4, 2023
1 parent 26983e2 commit 242a970
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/manage_sql.c
Original file line number Diff line number Diff line change
Expand Up @@ -20112,7 +20112,7 @@ init_host_prognosis_iterator (iterator_t* iterator, report_host_t report_host)
" FROM scap.cves, scap.cpes, scap.affected_products,"
" report_host_details"
" WHERE report_host_details.report_host = %llu"
" AND cpes.name = report_host_details.value"
" AND LOWER(cpes.name) = LOWER(report_host_details.value)"
" AND report_host_details.name = 'App'"
" AND cpes.id=affected_products.cpe"
" AND cves.id=affected_products.cve"
Expand Down

0 comments on commit 242a970

Please sign in to comment.