scw updated

bugcrowd · Nov 17, 2023 · 1637284 · 1637284
1 parent 1f74b3f
commit 1637284
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 13 deletions.
diff --git a/third-party-mappings/remediation_training/secure-code-warrior-links.json b/third-party-mappings/remediation_training/secure-code-warrior-links.json
@@ -199,13 +199,10 @@
   "broken_access_control": null,
   "broken_access_control.idor": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=broken_access_control:idor&redirect=true",
   "broken_access_control.idor.read_edit_delete_non_sensitive_information": null,
-  "broken_access_control.idor.read_edit_delete_sensitive_information": null,
-  "broken_access_control.idor.read_edit_delete_sensitive_information.complext_object_identifiers": null,
-  "broken_access_control.idor.read_sensitive_information": null,
-  "broken_access_control.idor.read_sensitive_information.iterable_object_identifiers": null,
-  "broken_access_control.idor.edit_delete_sensitive_information": null,
-  "broken_access_control.idor.edit_delete_sensitive_information.iterable_object_identifiers": null,
-  "broken_access_control.idor.edit_delete_sensitive_information.read_edit_delete_sensitive_information_pii": null,
+  "broken_access_control.idor.read_edit_delete_sensitive_information_guid": null,
+  "broken_access_control.idor.read_sensitive_information_iterable_object_identifiers": null,
+  "broken_access_control.idor.edit_delete_sensitive_information_iterable_object_identifiers": null,
+  "broken_access_control.idor.read_edit_delete_sensitive_information_iterable_object_identifiers": null,
   "broken_access_control.username_enumeration": null,
   "broken_access_control.username_enumeration.non_brute_force": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=broken_access_control:username_enumeration:non_brute_force&redirect=true",
   "broken_access_control.exposed_sensitive_android_intent": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=broken_access_control:exposed_sensitive_android_intent&redirect=true",
@@ -323,6 +320,9 @@
   "cryptographic_weakness.key_reuse.lack_of_perfect_forward_secrecy": null,
   "cryptographic_weakness.key_reuse.intra_environment": null,
   "cryptographic_weakness.key_reuse.inter_environment": null,
+  "cryptographic_weakness.broken_cryptography": null,
+  "cryptographic_weakness.broken_cryptography.use_of_broken_cryptographic_primitive": null,
+  "cryptographic_weakness.broken_cryptography.use_of_vulnerable_cryptographic_library": null,
   "cryptographic_weakness.side_channel_attack": null,
   "cryptographic_weakness.side_channel_attack.padding_oracle_attack": null,
   "cryptographic_weakness.side_channel_attack.timing_attack": null,
@@ -331,9 +331,6 @@
   "cryptographic_weakness.side_channel_attack.differential_fault_analysis": null,
   "cryptographic_weakness.use_of_expired_cryptographic_key_or_cert": null,
   "cryptographic_weakness.incomplete_cleanup_of_keying_material": null,
-  "broken_cryptography": null,
-  "broken_cryptography.use_of_broken_cryptographic_primitive": null,
-  "broken_cryptography.use_of_vulnerable_cryptographic_library": null,
   "privacy_concerns": null,
   "privacy_concerns.unnecessary_data_collection": null,
   "privacy_concerns.unnecessary_data_collection.wifi_ssid_password": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=privacy_concerns:unnecessary_data_collection:wifi_ssid_password&redirect=true",

diff --git a/vulnerability-rating-taxonomy.json b/vulnerability-rating-taxonomy.json
@@ -2007,18 +2007,18 @@
         {
           "id": "broken_cryptography",
           "name": "Broken Cryptography",
-          "type": "category",
+          "type": "subcategory",
           "children": [
             {
               "id": "use_of_broken_cryptographic_primitive",
               "name": "Use of Broken Cryptographic Primitive",
-              "type": "subcategory",
+              "type": "variant",
               "priority": 3
             },
             {
               "id": "use_of_vulnerable_cryptographic_library",
               "name": "Use of Vulnerable Cryptographic Library",
-              "type": "subcategory",
+              "type": "variant",
               "priority": 4
             }
           ]