-
Notifications
You must be signed in to change notification settings - Fork 454
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add jvndb.jvn.jp custom parser (#345)
- Loading branch information
Showing
4 changed files
with
399 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,265 @@ | ||
| <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> | ||
| <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="ja" lang="ja" style="overflow-x:hidden"> | ||
| <head> | ||
| <meta http-equiv="Content-Type" value="text/html; charset=Shift_JIS"> | ||
| <title>JVNDB-2018-013542 - JVN iPedia - 脆弱性対策情報データベース</title> | ||
|
|
||
| <meta name="Keywords" value="脆弱性対策情報データベース"> | ||
| <meta name="Description" value="脆弱性対策情報データベース"> | ||
| <meta http-equiv="X-UA-Compatible" value="IE=edge, requiresActiveX=true"> | ||
| <meta http-equiv="Content-Script-Type" value="text/javascript"> | ||
| <meta http-equiv="Content-Style-Type" value="text/css"> | ||
|
|
||
| <link href="https://jvndb.jvn.jp/common/css/master.css" rel="stylesheet" type="text/css" media="screen,print"> | ||
| <link media="all" href="https://jvndb.jvn.jp/common/css/provide.css" type="text/css" rel="stylesheet"> | ||
| <link href="https://jvndb.jvn.jp/common/css/font.css" rel="stylesheet" type="text/css" media="screen,print"> | ||
| <link href="https://jvndb.jvn.jp/common/css/print.css" rel="stylesheet" type="text/css" media="print"> | ||
| <link href="https://jvndb.jvn.jp/common/css/rightmenu.css" rel="stylesheet" type="text/css" media="screen,print"> | ||
|
|
||
|
|
||
| </head> | ||
| <body> | ||
| <a name="top" id="top"></a> | ||
|
|
||
| <div id="wrapper"> | ||
|
|
||
|
|
||
| <div id="header"> | ||
| <div class="logo"><a href="https://jvndb.jvn.jp/"><img height="60" alt="JVN iPedia - 脆弱性対策情報データベース" src="https://jvndb.jvn.jp/common/img/logo.gif" width="490" border="0"></a></div> | ||
| <div class="modifytxt">最終更新日：2019/02/22</div> | ||
| <div class="modifytxt"></div> | ||
| </div> | ||
| <div id="head-bar"> | ||
| <a href="https://jvndb.jvn.jp/nav/guide_sysadm.html">【活用ガイド】</a> | ||
| </div> | ||
|
|
||
|
|
||
|
|
||
| <div id="mainarea"> | ||
|
|
||
| <div id="leftarea"> | ||
| <div class="contents"> | ||
| <div id="news-list"> | ||
| <br> | ||
| <table class="vuln_table_clase"> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <h2><font face="arial, geneva, helvetica">JVNDB-2018-013542</font></h2> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <h2>NETWAVE MNG6200 デバイスにおける証明書・パスワードの管理に関する脆弱性</h2> | ||
| </td></tr> | ||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="overview">概要</a> | ||
| </td></tr> | ||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| NETWAVE MNG6200 デバイスには、証明書・パスワードの管理に関する脆弱性が存在します。 | ||
| </blockquote> | ||
| </td></tr> | ||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="cvss">CVSS による深刻度</a> (<a href="https://jvndb.jvn.jp/nav/jvndbhelp.html#jvndb3" target="_blank">CVSS とは?</a>) | ||
| </td></tr> | ||
| <tr><td colspan="2"> | ||
| <br> | ||
| <div style="margin: 20px 40px;"> | ||
| <div class="clearfix"> | ||
| <div class="float_left"> | ||
| <b>CVSS v3 による深刻度<br>基本値: <a href="https://jvndb.jvn.jp/cvss/ja/v3.html#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" target="_blank">9.8</a> (緊急) [NVD値]</b> | ||
| <ul> | ||
| <li>攻撃元区分: ネットワーク</li> | ||
| <li>攻撃条件の複雑さ: 低</li> | ||
| <li>攻撃に必要な特権レベル: 不要</li> | ||
| <li>利用者の関与: 不要</li> | ||
| <li>影響の想定範囲: 変更なし</li> | ||
| <li>機密性への影響(C): 高</li> | ||
| <li>完全性への影響(I): 高</li> | ||
| <li>可用性への影響(A): 高</li> | ||
| </ul> | ||
| </div> | ||
| <div class="float_left"> | ||
| <b>CVSS v2 による深刻度<br>基本値: <a href="https://jvndb.jvn.jp/cvss/ja/v2.html#AV:N/AC:L/Au:N/C:P/I:N/A:N" target="_blank">5.0</a> (警告) [NVD値]</b> | ||
| <ul> | ||
| <li>攻撃元区分: ネットワーク</li> | ||
| <li>攻撃条件の複雑さ: 低</li> | ||
| <li>攻撃前の認証要否: 不要</li> | ||
| <li>機密性への影響(C): 部分的</li> | ||
| <li>完全性への影響(I): なし</li> | ||
| <li>可用性への影響(A): なし</li> | ||
| </ul> | ||
| </div> | ||
| </div> | ||
| <div style="margin-top:20px"> | ||
|
|
||
| </div> | ||
| </div> | ||
| </td></tr> | ||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="affect">影響を受けるシステム</a> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
|
|
||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| NETWAVE Networks, Inc. | ||
| <ul> | ||
| <li>MNG6200 ファームウェア C4835805jrc12FU121413.cpr</li> | ||
| </ul> | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
|
|
||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="impact">想定される影響</a> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="solution">対策</a> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| 参考情報を参照して適切な対策を実施してください。 | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="venderinf">ベンダ情報</a> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="cwe">CWEによる脆弱性タイプ一覧</a>  <a href="http://www.ipa.go.jp/security/vuln/CWE.html" target="_blank">CWEとは?</a> | ||
| </td></tr> | ||
|
|
||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| <ol> | ||
| <li><a href="https://jvndb.jvn.jp/ja/cwe/CWE-255.html" target="_blank">証明書・パスワードの管理(CWE-255)</a> [NVD評価]</li> | ||
| </ol> | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="cve">共通脆弱性識別子(CVE)</a>  <a href="http://www.ipa.go.jp/security/vuln/CVE.html" target="_blank">CVEとは?</a> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| <ol> | ||
| <li><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20395" target="_blank">CVE-2018-20395</a></li> | ||
| </ol> | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="reference">参考情報</a> | ||
| </td></tr> | ||
|
|
||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| <ol> | ||
| <li>National Vulnerability Database (NVD) : <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-20395" target="_blank">CVE-2018-20395</a> </li> | ||
| <li>関連文書 : <a href="https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv" target="_blank">sensitivesOids/oidpassswordleaks.csv</a> </li> | ||
| </ol> | ||
| </blockquote> | ||
| </td></tr> | ||
|
|
||
| <tr><td class="vuln_table_clase_td_header" colspan="2"> | ||
| <a name="history">更新履歴</a> | ||
| </td></tr> | ||
| <tr><td colspan="2"> | ||
| <br> | ||
| <blockquote> | ||
| <ul style="list-style-type: none"> | ||
| <li>[2019年02月22日]<br> | ||
|   掲載</li> | ||
| </ul> | ||
| </blockquote> | ||
| <br> | ||
| </td></tr> | ||
| </table> | ||
| <table class="vuln_table_clase_footer"> | ||
| <tr><td colspan="2"><hr></td></tr> | ||
| <tr><td class="vuln_table_clase_date_header_td">公表日</td><td>2018/12/23</td></tr> | ||
| <tr><td class="vuln_table_clase_date_header_td">登録日</td><td>2019/02/22</td></tr> | ||
| <tr><td class="vuln_table_clase_date_header_td">最終更新日</td><td>2019/02/22</td></tr> | ||
| <tr><td colspan="2"><hr></td></tr> | ||
| </table> | ||
| </div> | ||
| </div> | ||
| </div> | ||
| <div id="rightarea"> | ||
| <div id="navi"> | ||
| <ul> | ||
| <li><img width="150" height="50" border="0" src="https://jvndb.jvn.jp/common/img/t_rnav_jvn.gif" alt="JVN"></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image1','','/common/img/r_nav_1_f2.gif',1)" href="http://jvn.jp/"><img width="150" height="27" border="0" name="Image1" src="https://jvndb.jvn.jp/common/img/r_nav_1.gif" alt="HOME" id="Image1"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image2','','/common/img/r_nav_2_f2.gif',1)" href="http://jvn.jp/nav/jvn.html"><img width="150" height="27" border="0" name="Image2" src="https://jvndb.jvn.jp/common/img/r_nav_2.gif" alt="JVNとは" id="Image2"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image3','','/common/img/r_nav_3_f2.gif',1)" href="http://jvn.jp/nav/jvnhelp.html"><img width="150" height="27" border="0" name="Image3" src="https://jvndb.jvn.jp/common/img/r_nav_3.gif" alt="脆弱性レポートの読み方" id="Image3"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image4','','/common/img/r_nav_4_f2.gif',1)" href="http://jvn.jp/report/index.html"><img width="150" height="27" border="0" name="Image4" src="https://jvndb.jvn.jp/common/img/r_nav_4.gif" alt="脆弱性レポート一覧" id="Image4"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image41','','/common/img/r_nav_4_1_f2.gif',1)" href="http://jvn.jp/jp/index.html"><img width="150" height="20" border="0" name="Image41" src="https://jvndb.jvn.jp/common/img/r_nav_4_1.gif" alt="VN_JP" id="Image41"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image44','','/common/img/r_nav_4_4_f2.gif',1)" href="http://jvn.jp/adj/index.html"><img width="150" height="20" border="0" name="Image44" src="https://jvndb.jvn.jp/common/img/r_nav_4_4.gif" alt="VN_JP 連絡不能" id="Image44"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image42','','/common/img/r_nav_4_2_f2.gif',1)" href="http://jvn.jp/vu/index.html"><img width="150" height="20" border="0" name="Image42" src="https://jvndb.jvn.jp/common/img/r_nav_4_2.gif" alt="VN_VU" id="Image42"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image43','','/common/img/r_nav_4_3_f2.gif',1)" href="http://jvn.jp/ta/index.html"><img width="150" height="20" border="0" name="Image43" src="https://jvndb.jvn.jp/common/img/r_nav_4_3.gif" alt="TA" id="Image43"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image5','','/common/img/r_nav_5_f2.gif',1)" href="http://jvn.jp/tr/index.html"><img width="150" height="27" border="0" name="Image5" src="https://jvndb.jvn.jp/common/img/r_nav_5.gif" alt="TRnotes" id="Image5"></a></li> | ||
| <li><a href="https://jvndb.jvn.jp/index.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image10','','/common/img/r_nav_10_f2.gif',1)"><img width="150" height="27" border="0" name="Image10" src="https://jvndb.jvn.jp/common/img/r_nav_10.gif" alt="JVN iPedia - 脆弱性対策情報データベース" id="Image10"></a></li> | ||
| <li><a href="https://jvndb.jvn.jp/search/index.php?mode=_vulnerability_search_IA_VulnSearch&lang=ja" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image01','','/common/img/r_nav_10_1_f2.gif',1)"><img width="150" height="20" border="0" name="Image01" src="https://jvndb.jvn.jp/common/img/r_nav_10_1.gif" alt="脆弱性対策情報データベース検索" id="Image01"></a></li> | ||
| <li><a href="https://jvndb.jvn.jp/nav/jvndb.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image02','','/common/img/r_nav_10_2_f2.gif',1)"><img width="150" height="20" border="0" name="Image02" src="https://jvndb.jvn.jp/common/img/r_nav_10_2.gif" alt="JVN iPediaとは" id="Image02"></a></li> | ||
| <li><a href="https://jvndb.jvn.jp/nav/jvndbhelp.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image03','','/common/img/r_nav_10_3_f2.gif',1)"><img width="150" height="20" border="0" name="Image03" src="https://jvndb.jvn.jp/common/img/r_nav_10_3.gif" alt="使い方" id="Image03"></a></li> | ||
| <li><a href="https://jvndb.jvn.jp/apis/myjvn/index.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image04','','/common/img/r_nav_10_4_f2.gif',1)"><img width="150" height="20" border="0" name="Image04" src="https://jvndb.jvn.jp/common/img/r_nav_10_4.gif" alt="MyJVN" id="Image04"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image6','','/common/img/r_nav_6_f2.gif',1)" href="http://jvn.jp/rss/index.html"><img width="150" height="27" border="0" name="Image6" src="https://jvndb.jvn.jp/common/img/r_nav_6.gif" alt="JVNJS/RSS" id="Image6"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image7','','/common/img/r_nav_7_f2.gif',1)" href="http://jvn.jp/nav/index.html"><img width="150" height="27" border="0" name="Image7" src="https://jvndb.jvn.jp/common/img/r_nav_7.gif" alt="ベンダ情報一覧" id="Image7"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image11','','/common/img/r_nav_11_f2.gif',1)" href="http://jvn.jp/reply/index.html"><img width="150" height="27" border="0" name="Image11" src="https://jvndb.jvn.jp/common/img/r_nav_11.gif" alt="連絡不能開発者一覧" id="Image11"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image8','','/common/img/r_nav_8_f2.gif',1)" target="ipasecurity" href="http://www.ipa.go.jp/security/vuln/report/"><img width="150" height="27" border="0" name="Image8" src="https://jvndb.jvn.jp/common/img/r_nav_8.gif" alt="脆弱性情報の届出" id="Image8"></a></li> | ||
| <li><a onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('Image9','','/common/img/r_nav_9_f2.gif',1)" href="http://jvn.jp/contact/index.html"><img width="150" height="27" border="0" name="Image9" src="https://jvndb.jvn.jp/common/img/r_nav_9.gif" alt="お問合せ先" id="Image9"></a></li> | ||
| </ul> | ||
| <br> | ||
| <a href="http://cve.mitre.org/compatible/compatible.html#j" target="cvecompatible"><img src="https://jvndb.jvn.jp/common/img/comp_compatible.gif" alt="CVE互換" id="Image99" name="Image99" border="0" height="50" width="145"></a> | ||
| </div> | ||
|
|
||
|
|
||
| </div> | ||
| </div> | ||
| <div id="footer"> | ||
| <div class="footertext"><img src="https://jvndb.jvn.jp/common/img/copyright.png" alt="Copyright © 2007- IPA. All rights reserved."></div> | ||
| </div> | ||
| </div> | ||
| </body> | ||
| </html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,25 @@ | ||
| export const JvndbJvnJpExtractor = { | ||
| domain: 'jvndb.jvn.jp', | ||
|
|
||
| title: { | ||
| selectors: ['title'], | ||
| }, | ||
|
|
||
| author: null, | ||
|
|
||
| date_published: null, | ||
|
|
||
| dek: null, | ||
|
|
||
| lead_image_url: null, | ||
|
|
||
| content: { | ||
| selectors: ['#news-list'], | ||
|
|
||
| defaultCleaner: false, | ||
|
|
||
| transforms: {}, | ||
|
|
||
| clean: [], | ||
| }, | ||
| }; |
Oops, something went wrong.