From d4d85aac1532946b9b9519fe80f03fdfee5f0cbd Mon Sep 17 00:00:00 2001 From: Sascha Knoop Date: Sat, 15 Feb 2025 22:45:14 +0100 Subject: [PATCH] fix CWE mapping inserted with last commit --- .../org/owasp/benchmarkutils/score/parsers/SonarQubeReader.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/SonarQubeReader.java b/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/SonarQubeReader.java index e06c6f64..86d175ed 100644 --- a/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/SonarQubeReader.java +++ b/plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/SonarQubeReader.java @@ -511,10 +511,10 @@ public static int cweLookup(String squidNumber) { return CweNumber .DONTCARE; // "String#replace" should be preferred to "String#replaceAll" case "S5542": + case "S5547": return CweNumber .WEAK_CRYPTO_ALGO; // Benchmark Vuln: Encryption algorithms should be used // with secure mode and padding scheme - case "S5547": case "S4790": // Using weak hashing algorithms is security-sensitive return CweNumber.WEAK_HASH_ALGO;