Guezone / SECMON

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.
Other
218 stars 47 forks source link

Error on Web Pages Home & By Product veulnerabilities & cve_updater.py #25

Closed Radvaroc53 closed 2 years ago

Radvaroc53 commented 3 years ago

_log cveupdater.py

Updating high risk product list.... Traceback (most recent call last): File "cve_updater.py", line 53, in plist = getFormatedProductList() File "/var/www/secmon/secmon_lib.py", line 860, in getFormatedProductList pvendor = disassmbledcpe[3].replace(""," ").title() IndexError: list index out of range

log apache [wsgi:error]

################## NEW GUI ERROR AT 27/09/2021, 10:16:53 ################## ######## URL : http://secmon.local/by-product-vulns ########## Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/flask/app.py", line 1950, in full_dispatch_request rv = self.dispatch_request() File "/usr/local/lib/python3.6/site-packages/flask/app.py", line 1936, in dispatch_request return self.view_functionsrule.endpoint File "/usr/local/lib/python3.6/site-packages/flask_simplelogin/init.py", line 117, in simple_decorator return dispatch(function, *args, *kwargs) File "/usr/local/lib/python3.6/site-packages/flask_simplelogin/init.py", line 98, in dispatch return check(must) or fun(args, **kwargs) File "/var/www/secmon/secmon_web.py", line 602, in byProductVulns plist = getFormatedProductList() File "/var/www/secmon/secmon_lib.py", line 860, in getFormatedProductList pvendor = disassmbledcpe[3].replace(""," ").title() IndexError: list index out of range None ################## PLEASE REPORT THIS ON GITHUB ##################

Guezone commented 3 years ago

Hi,

Do you have the latest version of SECMON? Normally, I have treated this problem in a commit (5e42a2002af20e13831d0c34b8ef279c712e1f80) of July 26 ?

Thanks

Jason-Linux commented 3 years ago

Yes i have the last version available on your github.

Le ven. 8 oct. 2021 à 10:09, Guezone @.***> a écrit :

Hi,

Do you have the latest version of SECMON? Normally, I have treated this problem in a commit (5e42a20 https://github.com/Guezone/SECMON/commit/5e42a2002af20e13831d0c34b8ef279c712e1f80) of July 26 ?

Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Guezone/SECMON/issues/25#issuecomment-938435945, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARHJN7UVFZNQZDVOGKSFFDTUF2RKZANCNFSM5EZ6YVOA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

Jason-Linux commented 3 years ago

what's changement between the actual and the last version ?

Le ven. 8 oct. 2021 à 16:10, Jason DUBOIS @.***> a écrit :

Yes i have the last version available on your github.

Le ven. 8 oct. 2021 à 10:09, Guezone @.***> a écrit :

Hi,

Do you have the latest version of SECMON? Normally, I have treated this problem in a commit (5e42a20 https://github.com/Guezone/SECMON/commit/5e42a2002af20e13831d0c34b8ef279c712e1f80) of July 26 ?

Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Guezone/SECMON/issues/25#issuecomment-938435945, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARHJN7UVFZNQZDVOGKSFFDTUF2RKZANCNFSM5EZ6YVOA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

Radvaroc53 commented 3 years ago

After a new install with same version i don't have the problem but Now i have this issue : datetime

fromisoformat don't exist for verion older than Pyhton 3.7

Radvaroc53 commented 3 years ago

Correctif : vim /var/www/secmon/secmon_lib.py

//Import datetime et backports from datetime import datetime, timedelta, date, time from backports.datetime_fromisoformat import MonkeyPatch MonkeyPatch.patch_fromisoformat()

after this restart I precise i'm on Rocky linux 8

Guezone commented 3 years ago

Hello @Radvaroc53,

I changed the format of the errors, now the variables appear in the traceback errors, this will allow me to understand why the error remains and will be used for the next debugs. Please update SECMON :

To do on the host :

To do in the Docker container:
pip3 install -r /var/www/secmon/requirements.txt service apache2 restart

Retry your attempts on the web pages that have errors and return me the new errors. Also, for the datetime issue, please use the Python version that has been tested and visible in the README, i.e. at least Python 3.8.

Thanks a lot

Radvaroc53 commented 2 years ago

Hi ! Sry for long time since last answer, last answer i sent you how correct the bug if using Python 3.6 after test on 3.8 I don't have this problem but i prefer install without docker, to keep 1 VM, 1 Feature, and have total control on the installation.