Message ID | 20230629134312.732919-1-peter.marko@siemens.com |
---|---|
State | New, archived |
Headers | show |
Series | [master,mickledore,kirkstone,dunfell] cve-update-nvd2-native: fix cvssV3 metrics | expand |
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb index 2b585983ac..cb03fe730c 100644 --- a/meta/recipes-core/meta/cve-update-nvd2-native.bb +++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb @@ -313,8 +313,8 @@ def update_db(conn, elt): except KeyError: cvssv2 = 0.0 try: - accessVector = accessVector or elt['impact']['baseMetricV3']['cvssV3']['attackVector'] - cvssv3 = elt['impact']['baseMetricV3']['cvssV3']['baseScore'] + accessVector = accessVector or elt['cve']['metrics']['cvssMetricV31'][0]['cvssData']['attackVector'] + cvssv3 = elt['cve']['metrics']['cvssMetricV31'][0]['cvssData']['baseScore'] except KeyError: accessVector = accessVector or "UNKNOWN" cvssv3 = 0.0