CiscoPSIRT / openVulnAPI

Documentation and Tools for Cisco's PSIRT openVuln API
https://developer.cisco.com/psirt/
MIT License
102 stars 52 forks source link

Unable to get results from security/advisories/cve/{cve_id} endpoint #90

Closed aplukcisco closed 2 years ago

aplukcisco commented 2 years ago

Describe the bug When trying to query for advisories by CVE ID, the api always return CVE_ID not found even though the CVE ID entry exists.

To Reproduce Get a access token from Cisco API Console

  1. Run curl command: curl -X GET "https://api.cisco.com/security/advisories/cve/CVE-2022-23280" -H "Content-Type: application/json" -H "Authorization: Bearer 3UI3lBHwLjNjNvBa3J7spnXsx02W"
  2. See error {"errorCode":"NO_DATA_FOUND","errorMessage":"CVE_ID not found"}%
  3. The CVE entry exists in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23280

Expected behavior The CVE details should return

Desktop (please complete the following information):

santosomar commented 2 years ago

Hi @aplukcisco !

The openVuln API is an API for Cisco Security Vulnerabilities. The CVE in your example (CVE-2022-23280) is a Microsoft Security Vulnerability - "Microsoft Outlook for Mac Security Feature Bypass Vulnerability."

Try a Cisco CVE such as CVE-2022-20733.

aplukcisco commented 2 years ago

Thanks for the clarification @santosomar . That actually works!

santosomar commented 2 years ago

Excellent! thank you, @aplukcisco !