Commit Graph

84 Commits

Author SHA1 Message Date
99eb5342cf
fix(eChecklist-import): Fix error with formulas in status column
This should remedy the reported behavior of statuses quietly being changed to "Not Reviewed".
scan.inc - Added new set_Host_Error method to set the error value for a specific host
parse_excel_echecklist.php - explicitly check for the status to equal 1-of-7 expected values, if not, add note to finding, set scan error message, and default status to "Not Reviewed"
export.php - Added cell lock for A11:E{last row} with the default password of "sagacity" (all lowercase)

Fixes #80
2019-01-09 21:49:58 -05:00
8973c2e046
fix(ckl-export): Fix bug when exporting CKL
Added a "group by STIG_ID" statement to fix a bug.  This is a short-term fix as it will result in random VMS IDs populating where there is a duplicate.  A real fix will require capturing the checklist ID and saving it as part of the VMS ID.

#78 fixed
2019-01-09 20:17:13 -05:00
4e0b6c08c6
feat: add git template
Add a git commit template for better messages.
2019-01-07 13:09:28 -05:00
4d20608767
Fix for bug #82 2019-01-03 17:47:16 -05:00
a32988ed03
parse_excel_echecklist.php:
Skip parsing orphan worksheet
Issue error if there are more than 100 targets in any worksheet
Save findings when you get above 1000

database.inc:
Comment out block of code to retrieve orphan findings to export to the eChecklist

setup.php:
Convert possible algorithms to lower case. (should fix bug that person on FB was seeing).
2018-12-14 09:32:40 -05:00
92cbf58145
Fix error with compliant and assessed percentages format on the stats page (was showing more than 2 decimal places). 2018-12-14 09:22:06 -05:00
904f1e4655
Fixed formatting with percentage compliant and percentage assessed (default to only show 2 decimal places) 2018-12-12 11:41:13 -05:00
8048fea8d7
Typo fix #77 2018-12-04 23:11:32 -05:00
dfb81bf388
Updates 2018-12-01 23:21:20 -05:00
5849a2620e
Fix for #75 2018-11-29 14:32:45 -05:00
16fb5885b2
Fix for #74 2018-11-29 14:31:20 -05:00
3c9a848615
Update README.pdf for next release 2018-11-27 11:10:22 -05:00
afd98f79d4
Added files for bug #56 2018-11-27 10:08:37 -05:00
3deecb098b
Fix for #73 2018-11-27 09:31:48 -05:00
437de8548a
Fix for #71 2018-11-23 09:50:42 -05:00
f022791e44
Misc updates 2018-11-16 21:42:57 -05:00
699604534c Draft update for #47 2018-11-16 17:24:02 -05:00
2f82147240 #20 2018-11-16 16:25:41 -05:00
7810e0a3dd #14 2018-11-16 15:56:06 -05:00
f46d148654 Fix for #15 (mouse over message to see files) 2018-11-16 15:47:35 -05:00
52159a16a6 Fix for bug #34
Import was deleted because export was changed to JSON format instead of XML, will have to rebuild
2018-11-16 13:39:23 -05:00
f530c5a2a1 Changes to support bug #33
Remove query limit when retrieving CPEs
2018-11-16 11:54:19 -05:00
ca89e02c4e host_list.inc - Added method to increase finding count
system.inc - fixed typo
parse_excel_echecklist.php - added functionality to assign OS and checklists based on worksheet contents
database.inc - Added a couple methods to support changes for #25
export.php - Minor change to OS listing and added add_cell_comment method to migrate scanner notes to a comment instead of the main note (separating the scanner and anaylst comments)
2018-11-08 17:26:27 -05:00
7e44403d93 Fix for #67 2018-11-08 09:45:12 -05:00
e8fdd4217e Dumb mistake in data validation 2018-11-07 21:52:28 -05:00
a6808b2add Database_Baseline.zip - updated sagacity_routines.sql to support removing findings.id field
database.inc - uncomment code block in post_Processing
2018-11-06 15:42:59 -05:00
a9fc4f6a86 Merge branch 'v1.3.4' of https://github.com/cyberperspectives/sagacity into v1.3.4 2018-11-06 15:37:55 -05:00
21082c7513 checklist.inc - deleted duplicate BIND 9 checklist icon entry
finding.inc - removed ID property to prevent duplicate findings from being added to the table
host_list.inc - deleted unused constructor
import.inc - formatting
db_schema.json - removed sagacity.findings.id field (making tgt_id and pdi_id new primary keys), and updated references
Database_Baseline.zip - updated routines for above change
background_results.php - fixed bug #19
export-ckl.php - performance adjustments
parse_excel_echecklist.php - performance improvements, ensure duplicate findings are not created, make eChecklist true status, update for removing findings.id field
parse_nvd_json_cve.php - convert reading json to array instead of object for reading CPEs (which were updated to CPE 2.3 instead of 2.2)
parse_* - remove findings.id field
database.inc - formatting, and update for removing findings.id field
index.php - ensure user can't import a host list without uploading a host list file

Fixed:
#65, #51, #28, #27, #10
2018-11-06 15:36:48 -05:00
Jeff Odegard
5b749f6844
Fix for #62
Commented out last INSERT in post_Processing
2018-11-03 16:02:08 -06:00
Jeff Odegard
ebc5cc6a7e
Fix for #63
Line 11926, added isset to check for index 0:   if (is_array($pri_find) && count($pri_find) && isset($pri_find[0])) {
2018-10-29 20:03:24 -06:00
Jeff Odegard
f1cab13251
Add ROLE to .ckl ASSET Tag and delete HOST_GUID
These changes make the .ckl exports compatible with the latest STIG Viewer 2.8.
2018-10-29 19:42:36 -06:00
5d8711d494 Fix bug #49
Revert update_db.php to download compilation STIG library instead of individual as links are inconsistent (#60, #64, #61
Add scape_webpage method to helper.inc for future efforts
Fixed typo in uninstall.bat
2018-10-29 13:19:31 -04:00
ab9005f0c3 Partial bug fix for #62 since new versions of SCC include extra characters in the VMS ID. 2018-10-27 12:20:33 -04:00
7f2f6a9046 Fix for #60
Some formatting
Die if installer.php fails to create password file
Update target counts after importing eChecklist and CKL
2018-10-25 17:48:57 -04:00
d43775b26f Fix bug with host list import not working correctly. 2018-10-25 11:32:48 -04:00
e995c0e78e Fixed a couple typos 2018-10-23 18:46:40 -04:00
17dbe134cc Database_Baseline.zip - Revisions for creating views and routines
installer.php - Fix bug when
update_db.php - Converted STIG download to identify the zip files from the a-z master list and download them individually instead of downloading the compilation zip file.  Also integrated the sunset list into the same process so ALL STIGs are downloaded and imported at the same time
2018-10-19 18:45:08 -04:00
c34d4eafd9 Vendor updates 2018-10-17 22:28:29 -04:00
98ea166a22 Fix for #10, #57, & #58 2018-10-17 22:19:41 -04:00
1645914d32 Update to fix some of the improper working of the results page. This does not fix the SCC result parsing...still working on that. 2018-10-17 19:44:37 -04:00
3ffd9b971e Update for config.inc for 1.3.4 release 2018-10-17 16:26:42 -04:00
43da94ed9c Fix for #57 2018-10-17 14:42:49 -04:00
fc22e6875e Fix for #49 2018-10-16 12:24:10 -04:00
479c34ca5d I believe this should fix #51. 2018-10-13 20:15:37 -04:00
13456fed63 Update to fix #52. 2018-10-13 20:07:56 -04:00
Jeff Odegard
c0b54abe09
Update README.md
Added the Cyber Perspectives Web Page to the Readme
2018-10-03 15:09:57 -06:00
Jeff Odegard
4f53418e8c
Created uinstall.bat, updated install.bat
Adding an uninstall.bat that, when run as administrator, will stop the apache2.4 and mysql services, delete the mysql service (which XAMPP uninstall leaves behind...), deletes the www folder and uninstalls XAMPP.

Modified the install.bat script to suppress output when deleting the unnecessary XAMPP htdocs folder and added a friendly "contact us" message to encourage some feedback from our users.
2018-10-03 15:06:56 -06:00
Cyber Perspectives, LLC
2c0bbb793d
Merge pull request #48 from cyberperspectives/v1.3.3
V1.3.3
2018-10-02 10:29:50 -04:00
dca07e06f5 Bug #18 fix 2018-09-27 14:27:57 -04:00
dda64e1239 Merge branch 'v1.3.3' of https://github.com/cyberperspectives/sagacity into HEAD 2018-09-26 10:43:03 -04:00