1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
# CVSS-Suite, a Ruby gem to manage the CVSS vector
#
# Copyright (c) 2016-2022 Siemens AG
# Copyright (c) 2022 0llirocks
#
# Authors:
# 0llirocks <http://0lli.rocks>
#
# This work is licensed under the terms of the MIT license.
# See the LICENSE.md file in the top-level directory.
module CvssSuite
##
# This class represents any CVSS vector. Do not instantiate this class!
class Cvss
##
# Metric of a CVSS vector.
attr_reader :base, :temporal, :environmental
##
# Returns the vector itself.
attr_reader :vector
##
# Creates a new CVSS vector by a +vector+.
#
# Raises an exception if it is called on Cvss class.
def initialize(vector)
raise CvssSuite::Errors::InvalidParentClass, 'Do not instantiate this class!' if instance_of? Cvss
@vector = vector
@properties = []
extract_metrics
init_metrics
end
##
# Returns if CVSS vector is valid.
def valid?
if @amount_of_properties >= required_amount_of_properties
base = @base.valid?
temporal = @base.valid? && @temporal.valid?
environmental = @base.valid? && @environmental.valid?
full = @base.valid? && @temporal.valid? && @environmental.valid?
base || temporal || environmental || full
else
false
end
end
##
# Returns the severity of the CVSS vector.
def severity
check_validity
score = overall_score
if score <= 0.0
'None'
elsif (0.1..3.9).cover? score
'Low'
elsif (4.0..6.9).cover? score
'Medium'
elsif (7.0..8.9).cover? score
'High'
elsif (9.0..10.0).cover? score
'Critical'
else
'None'
end
end
##
# Returns the Overall Score of the CVSS vector.
def overall_score
check_validity
return temporal_score if @temporal.valid? && !@environmental.valid?
return environmental_score if @environmental.valid?
base_score
end
private
def extract_metrics
properties = @vector.split('/')
@amount_of_properties = properties.size
properties.each_with_index do |property, index|
property = property.split(':')
@properties.push({ name: property[0], selected: property[1], position: index })
end
@properties = [] if @properties.group_by { |p| p[:name] }.select { |_k, v| v.size > 1 }.length.positive?
end
def check_validity
raise CvssSuite::Errors::InvalidVector, 'Vector is not valid!' unless valid?
end
def required_amount_of_properties
total = @base.count
total || 0
end
end
end
|
