topic Re: Api PSIRT update by date range issue in Services Discussions

Api PSIRT update by date range issue

cisco_api_cco — Mon, 30 Oct 2017 14:38:16 GMT

When we call https://api.cisco.com/security/advisories/cvrf/all/lastpublished?xxx to get last updated items, we spotted there are some missing updates.

When we called initially on 2017-08-22 for all we got related software versions for advisories in attached excel.

Then we recently called again for all and for the same advisories software versions gone.

It means it was silent update inside nested xml(we get this link inside cvrf xml for each advisory), for example”

https://tools.cisco.com/security/center/contentxml/CiscoSecurityAdvisory/cisco-sa-20170802-ise/cvrf/cisco-sa-20170802-ise_cvrf.xml

Also, for those advisories last update date is not change and for cisco-sa-20170802-ise is 2017-08-02, it looks like no changes has been detected for that advisory.

Is it something you can fix on your side, or we should stop using date range and update always for all?

Re: Api PSIRT update by date range issue

Omar Santos — Tue, 31 Oct 2017 14:08:39 GMT

Hi,

We had to remove the versions of the results due to data inconsistency issues. Currently, detailed version information is supported for IOS and IOS-XE high and critical advisories. We are working on expanding this functionality to medium severity advisories and also other operating systems like NXOS.

Thanks! Omar

Re: Api PSIRT update by date range issue

cisco_api_cco — Tue, 31 Oct 2017 14:38:48 GMT

Hi ,

The problem is, that api didn't detect this change when we called by date range, so to get this update we had to make a call to get all PSIRTs. The issue is not with data, but api mechanism.
Could you investigate this why it has happened?