Class: AddVulnDetails

Inherits:
ActiveRecord::Migration
  • Object
show all
Defined in:
db/migrate/20120625000000_add_vuln_details.rb

Class Method Summary collapse

Class Method Details

.down ⇒ Object 



31
32
33
 
# File 'db/migrate/20120625000000_add_vuln_details.rb', line 31

def self.down
	drop_table :vuln_details
end

.up ⇒ Object 



3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
 
# File 'db/migrate/20120625000000_add_vuln_details.rb', line 3

def self.up
	create_table :vuln_details do |t|
		t.integer   :vuln_id     # Vuln table reference
		t.float		:cvss_score  # 0.0 to 10.0
		t.string	:cvss_vector # Ex: (AV:N/AC:L/Au:N/C:C/I:C/A:C)(AV:N/AC:L/Au:N/C:C/I:C/A:C)

		t.string	:title       # Short identifier
		t.text		:description # Plain text or HTML (trusted)
		t.text		:solution    # Plain text or HTML (trusted)
		t.binary	:proof       # Should be UTF-8, but may not be, sanitize on output
					             # Technically this duplicates vuln.info, but that field
					             # is poorly managed / handled today. Eventually we will
					             # replace vuln.info

		# Nexpose-specific fields
		t.integer	:nx_console_id   # NexposeConsole table reference
		t.integer	:nx_device_id    # Reference from the Nexpose side
		t.string	:nx_vuln_id      # 'jre-java-update-flaw'
		t.float		:nx_severity     # 0-10
		t.float		:nx_pci_severity # 0-10
		t.timestamp	:nx_published    # Normalized from "20081205T000000000"
		t.timestamp	:nx_added        # Normalized from "20081205T000000000"
		t.timestamp	:nx_modified     # Normalized from "20081205T000000000"
		t.text		:nx_tags         # Comma separated

	end
end