topic Re: OpenVulnQuery API-Platform name not returned from /OS_version/OS_d in Services Discussions

OpenVulnQuery API-Platform name not returned from /OS_version/OS_data

ROBERT THOMSON — Thu, 25 Apr 2024 05:29:17 GMT

Hi
I'm querying the /OS_version/OS_data endpoint to get a list of versions, and for each of the OSType parameters I have tried I get a response but it only returns the nos_type and nos_version fields. The platform_name field listed in the schema is not returned.

I can see duplicates of a number of entries so I assume they could be further refined by platform_name if it were to be returned.
This seems like a bug, but I'm open to suggestions

Re: OpenVulnQuery API-Platform name not returned from /OS_version/OS_d

PR Oxman — Mon, 29 Apr 2024 02:04:06 GMT

Hello Robert,

Checking on this, will revert as soon as possible.

Thanks.

Re: OpenVulnQuery API-Platform name not returned from /OS_version/OS_d

PR Oxman — Tue, 30 Apr 2024 01:07:56 GMT

Hello Robert,

So platforms should be returned for NXOS, ASA, FTD and FXOS, not for others.

When the original endpoint for ASA, FTD, FXOS was added we never included the product in the endpoint https://apix.cisco.com/security/advisories/v2/OS_version/OS_data?OSType. Looking back probably because we had included it in https://apix.cisco.com/security/advisories/v2/platforms?OSType endpoint.

But regardless of the history we will include platform information alongside the version in the API for ASA, FTD, FXOS.

We will roll the fix out in May 2024.

HTH

Re: OpenVulnQuery API-Platform name not returned from /OS_version/OS_d

PR Oxman — Tue, 21 May 2024 07:41:01 GMT

Hello Robert,

The fix has been deployed to production.

Example:

[
    {
       "nos_version": "9.14.4.22",
       "nos_type": "ASA",
       "platform_name": "Cisco ASA 5500-X Series Firewalls"
    },
   {
        "nos_version": "9.14.4.17",
        "nos_type": "ASA",
        "platform_name": "Cisco ASA 5500-X Series Firewalls"
},

HTH

Re: OpenVulnQuery API-Platform name not returned from /OS_version/OS_d

ROBERT THOMSON — Tue, 21 May 2024 07:47:10 GMT

Thanks, that's helpful.