search

DefectDojo / django-DefectDojo

DevSecOps, ASPM, Vulnerability Management. All on one platform.
https://defectdojo.com
BSD 3-Clause "New" or "Revised" License
3.75k stars 1.56k forks source link

Needed Support for CWE info in AWS Inspector findings (wrapped in scantype as AWS Security Hub) and Aquasec findings #10957

Open mahesh-ppro opened 2 months ago

mahesh-ppro commented 2 months ago

Hello Team, I was curious about the cwe field in the aquasec scans as well as AWS security hub scans. The field with name cwe_info is further in the chain getting transformed into cwe which is shown on the UI. But it expects a cwe number alone. Even if we provide that as a part of scan_report file it gets ignored and not shown on UI. Does that field not handled properly in the downstream processing ? Note : If we provide the cwe number by editing the finding from the UI itself then it works like a charm.

Could someone please shed some light on this ?

Thank you so much in advance

manuel-sommer commented 2 months ago

Do you have a sample file? Then, I can help you