Domain name for API request: csip.intl.tencentcloudapi.com.
Query vulnerability information in the three-dimensional protection center.
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: DescribeSearchBugInfo. |
| Version | Yes | String | Common Params. The value used for this API: 2022-11-21. |
| Region | No | String | Common Params. This parameter is not required. |
| Id | Yes | String | Return urgent vulnerabilities when the value is 1, return the emergency vulnerability list when the value is 2, and use with the CVEId field as input to display the vulnerability data when the value is 3. |
| CVEId | No | String | Pass in this parameter when id=3. |
| Parameter Name | Type | Description |
|---|---|---|
| Data | DataSearchBug | Vulnerability information and asset information |
| ReturnCode | Integer | Status value. 0: query successful. Non-zero: query failed. |
| ReturnMsg | String | Status information. success: query succeeded. fail: query failed. |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
Query emergency vulnerability information
POST / HTTP/1.1
Host: csip.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeSearchBugInfo
<Common request parameters>
{
"Id": "1"
}{
"Response": {
"Data": {
"CFWPatch": "1",
"CWPFix": 0,
"CWPScan": "0",
"CveId": "CVE-2024-0884",
"DataAsset": [
{
"AppID": "12435623",
"CVEId": "CVE-2012-0023",
"IsScan": 1,
"InfluenceAsset": 45,
"NotRepairAsset": 33,
"NotProtectAsset": 24,
"TaskId": "mis-qbskll7i",
"TaskPercent": 100,
"TaskTime": "1630291892",
"ScanTime": "2022-1-12"
}
],
"DataBug": [
{
"CVEId": "CVE-2023-22518",
"CVSSScore": "9.8",
"CreateTime": "2023-12-17T11:25:43+08:00",
"Fix": "1. There is an updated version available. Users affected are advised to upgrade to the following fixed versions:\nAtlassian Confluence >= 7.19.16\nAtlassian Confluence >= 8.3.4\nAtlassian Confluence >= 8.4.4\nAtlassian Confluence >= 8.5.3\nAtlassian Confluence >= 8.6.1\nReference link: https://www.atlassian.com/software/confluence/download-archives\n2. Mitigation solution\n(1) Back up the instance by referring to the following link: https://confluence.atlassian.com/doc/production-backup-strategy-38797389.html;\n(2) Set ACL to restrict externally accessible IPs;\n(3) It is advisable to delete the instance from the internet based on the actual business situation until it can be upgraded."
"Id": 1012504,
"ImpactCOMPENT": "(atlassian) confluence",
"ImpactOs": "debian",
"ImpactVersion": "version<7.19.16,8.0.0<=version<8.3.4,8.4.0<=version<8.4.4,8.5.0<=version<8.5.3,8.6.0<=version<8.6.1",
"IsPublish": 1,
"Level": "extreme",
"PatchId": "pcmgr-452553",
"ProSupport": 0,
"Reference": "url",
"ReleaseTime": "2023-10-30 16:09:48",
"SubCategory": "Permission escalation"
"Tag": "NETWORK,POC,KNOWN_EXPLOITED,APP",
"UpdateTime": "2023-12-17T11:25:43+08:00",
"VULCategory": 54,
"VULDescribe": "Confluence is knowledge management and collaboration software developed by Atlassian, designed to help teams collaborate, share information, and create documents. An improper authentication vulnerability exists in affected versions of Confluence Data Center/Server. An unauthenticated attacker can construct malicious requests to escalate privileges and execute commands."
"VULName": "Atlassian Confluence Data Center and Server privilege bypass vulnerability (CVE-2023-22518)"
}
],
"DataSupport": [
{
"VSSScan": true,
"CWPScan": "1",
"CFWPatch": "1",
"WafPatch": 1,
"CWPFix": 1,
"CveId": "CVE-2024-1889"
}
],
"StateCode": "1",
"VSSScan": true,
"WafPatch": 1
},
"RequestId": "ea962c2c-4d97-4412-9e3b-db533b59592b",
"ReturnCode": 0,
"ReturnMsg": "Success"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
There is no error code related to the API business logic. For other error codes, please see Common Error Codes.
Esta página foi útil?
Você também pode entrar em contato com a Equipe de vendas ou Enviar um tíquete em caso de ajuda.
comentários