Merge branch 'master' into patch-1

Checkmarx · Sep 19, 2024 · 6cd6306 · 6cd6306
2 parents beacf13 + 507e983
commit 6cd6306
Show file tree

Hide file tree

Showing 498 changed files with 684 additions and 499 deletions.
diff --git a/assets/queries/buildah/run_using_apt/metadata.json b/assets/queries/buildah/run_using_apt/metadata.json
@@ -7,6 +7,7 @@
   "descriptionUrl": "https://github.com/containers/buildah/blob/main/docs/buildah-run.1.md",
   "platform": "Buildah",
   "descriptionID": "eb58fa0b",
-  "cwe": "",
+  "cloudProvider": "common",
+  "cwe": "1188",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cicd/github/run_block_injection/metadata.json b/assets/queries/cicd/github/run_block_injection/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CICD",
   "descriptionID": "02044a75",
   "cloudProvider": "common",
-  "cwe": "",
+  "cwe": "94",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cicd/github/script_block_injection/metadata.json b/assets/queries/cicd/github/script_block_injection/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CICD",
   "descriptionID": "63e215f4",
   "cloudProvider": "common",
-  "cwe": ""
+  "cwe": "94"
 }
diff --git a/assets/queries/cicd/github/unpinned_actions_full_length_commit_sha/metadata.json b/assets/queries/cicd/github/unpinned_actions_full_length_commit_sha/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CICD",
   "descriptionID": "9cb8402d",
   "cloudProvider": "common",
-  "cwe": "",
+  "cwe": "829",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cicd/github/unsecured_commands/metadata.json b/assets/queries/cicd/github/unsecured_commands/metadata.json
@@ -8,5 +8,6 @@
   "platform": "CICD",
   "descriptionID": "44751f79",
   "cloudProvider": "common",
-  "cwe": ""
+  "oldSeverity": "MEDIUM",
+  "cwe": "78"
 }
diff --git a/assets/queries/cloudFormation/aws/access_key_not_rotated_within_90_days/metadata.json b/assets/queries/cloudFormation/aws/access_key_not_rotated_within_90_days/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "148d40cb",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "522"
 }
diff --git a/assets/queries/cloudFormation/aws/alb_is_not_integrated_with_waf/metadata.json b/assets/queries/cloudFormation/aws/alb_is_not_integrated_with_waf/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "2cad71a7",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/cloudFormation/aws/alb_listening_on_http/metadata.json b/assets/queries/cloudFormation/aws/alb_listening_on_http/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "55f05412",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "319",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/alexa_skill_plaintext_client_secret_exposed/metadata.json b/assets/queries/cloudFormation/aws/alexa_skill_plaintext_client_secret_exposed/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "cd21865c",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "256"
 }
diff --git a/...s/cloudFormation/aws/amazon_dms_replication_instance_is_publicly_accessible/metadata.json b/...s/cloudFormation/aws/amazon_dms_replication_instance_is_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "bc97aed1",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/amazon_mq_broker_encryption_disabled/metadata.json b/assets/queries/cloudFormation/aws/amazon_mq_broker_encryption_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "c5d562da",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/amplify_app_access_token_exposed/metadata.json b/assets/queries/cloudFormation/aws/amplify_app_access_token_exposed/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "40717425",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "798",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...s/queries/cloudFormation/aws/amplify_app_basic_auth_config_password_exposed/metadata.json b/...s/queries/cloudFormation/aws/amplify_app_basic_auth_config_password_exposed/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "20573b94",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "798",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/amplify_app_oauth_token_exposed/metadata.json b/assets/queries/cloudFormation/aws/amplify_app_oauth_token_exposed/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "c9abb2c8",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "798",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...ueries/cloudFormation/aws/amplify_branch_basic_auth_config_password_exposed/metadata.json b/...ueries/cloudFormation/aws/amplify_branch_basic_auth_config_password_exposed/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "f68a0ad6",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "256",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_access_logging_disabled/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_access_logging_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "2a69fc63",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_cache_cluster_disabled/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_cache_cluster_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "c5c1c902",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_cache_encrypted_disabled/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_cache_encrypted_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "16f89b5d",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "316"
 }
diff --git a/...ueries/cloudFormation/aws/api_gateway_deployment_without_access_log_setting/metadata.json b/...ueries/cloudFormation/aws/api_gateway_deployment_without_access_log_setting/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "9587628c",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/...mation/aws/api_gateway_deployment_without_api_gateway_usage_plan_associated/metadata.json b/...mation/aws/api_gateway_deployment_without_api_gateway_usage_plan_associated/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "8161e665",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "770"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_endpoint_config_is_not_private/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_endpoint_config_is_not_private/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "f370d030",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "668"
 }
diff --git a/.../queries/cloudFormation/aws/api_gateway_method_does_not_contains_an_api_key/metadata.json b/.../queries/cloudFormation/aws/api_gateway_method_does_not_contains_an_api_key/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "43a06e88",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "285"
 }
diff --git a/...udFormation/aws/api_gateway_stage_without_api_gateway_usage_plan_associated/metadata.json b/...udFormation/aws/api_gateway_stage_without_api_gateway_usage_plan_associated/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "ad012827",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "770"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_with_invalid_compression/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_with_invalid_compression/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "de76ae0f",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_with_open_access/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_with_open_access/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "d8d6ab46",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_without_configured_authorizer/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_without_configured_authorizer/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "5734fbc7",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_without_security_policy/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_without_security_policy/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "92418e29",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_without_ssl_certificate/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_without_ssl_certificate/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "95c8b13a",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "295"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_without_waf/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_without_waf/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "774d759c",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/cloudFormation/aws/api_gateway_xray_disabled/metadata.json b/assets/queries/cloudFormation/aws/api_gateway_xray_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "7db1d7b0",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/auto_scaling_group_with_no_associated_elb/metadata.json b/assets/queries/cloudFormation/aws/auto_scaling_group_with_no_associated_elb/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "99966f58",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "400"
 }
diff --git a/assets/queries/cloudFormation/aws/automatic_minor_upgrades_disabled/metadata.json b/assets/queries/cloudFormation/aws/automatic_minor_upgrades_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "e2908402",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "710"
 }
diff --git a/...loudFormation/aws/batch_job_definition_with_privileged_container_properties/metadata.json b/...loudFormation/aws/batch_job_definition_with_privileged_container_properties/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "c8983ada",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/cloudFormation/aws/cdn_configuration_is_missing/metadata.json b/assets/queries/cloudFormation/aws/cdn_configuration_is_missing/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "6a8090b9",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "710"
 }
diff --git a/...s/queries/cloudFormation/aws/cloudformation_specifying_credentials_not_safe/metadata.json b/...s/queries/cloudFormation/aws/cloudformation_specifying_credentials_not_safe/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "694c6fa8",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudfront_logging_disabled/metadata.json b/assets/queries/cloudFormation/aws/cloudfront_logging_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "3254d6d0",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/...ts/queries/cloudFormation/aws/cloudfront_viewer_protocol_policy_allows_http/metadata.json b/...ts/queries/cloudFormation/aws/cloudfront_viewer_protocol_policy_allows_http/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "bf860aba",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "319",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudfront_without_minimum_protocol_tls_1.2/metadata.json b/assets/queries/cloudFormation/aws/cloudfront_without_minimum_protocol_tls_1.2/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "e86728bc",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudfront_without_waf/metadata.json b/assets/queries/cloudFormation/aws/cloudfront_without_waf/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "fae904ce",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudtrail_log_file_validation_disabled/metadata.json b/assets/queries/cloudFormation/aws/cloudtrail_log_file_validation_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "66ab1b20",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudtrail_log_files_not_encrypted_with_kms/metadata.json b/assets/queries/cloudFormation/aws/cloudtrail_log_files_not_encrypted_with_kms/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "cdc07a23",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudtrail_logging_disabled/metadata.json b/assets/queries/cloudFormation/aws/cloudtrail_logging_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "8cabc568",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudtrail_multi_region_disabled/metadata.json b/assets/queries/cloudFormation/aws/cloudtrail_multi_region_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "34ddc2cb",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudtrail_not_integrated_with_cloudwatch/metadata.json b/assets/queries/cloudFormation/aws/cloudtrail_not_integrated_with_cloudwatch/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "f43ba695",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudtrail_sns_topic_name_undefined/metadata.json b/assets/queries/cloudFormation/aws/cloudtrail_sns_topic_name_undefined/metadata.json
@@ -8,6 +8,6 @@
   "platform": "CloudFormation",
   "descriptionID": "69327f38",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudwatch_logging_disabled/metadata.json b/assets/queries/cloudFormation/aws/cloudwatch_logging_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "617aba8a",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "779"
 }
diff --git a/assets/queries/cloudFormation/aws/cloudwatch_metrics_disabled/metadata.json b/assets/queries/cloudFormation/aws/cloudwatch_metrics_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "CloudFormation",
   "descriptionID": "72a550b1",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }