Merge pull request #7187 from Checkmarx/AST-45283-Terraform

update(query): add CWE infos to terraform queries
Checkmarx · Sep 18, 2024 · a398c77 · a398c77
2 parents 329dba9 + 630ffdd
commit a398c77
Show file tree

Hide file tree

Showing 703 changed files with 697 additions and 671 deletions.
diff --git a/assets/queries/terraform/alicloud/action_trail_logging_all_regions_disabled/metadata.json b/assets/queries/terraform/alicloud/action_trail_logging_all_regions_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "72180b32",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/...ries/terraform/alicloud/actiontrail_trail_oss_bucket_is_publicly_accessible/metadata.json b/...ries/terraform/alicloud/actiontrail_trail_oss_bucket_is_publicly_accessible/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "0b91a8b5",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "668"
 }
diff --git a/assets/queries/terraform/alicloud/alb_listening_on_http/metadata.json b/assets/queries/terraform/alicloud/alb_listening_on_http/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "75d71dc8",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "319",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/api_gateway_api_protocol_not_https/metadata.json b/assets/queries/terraform/alicloud/api_gateway_api_protocol_not_https/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "31f4c870",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "319",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/cmk_is_unusable/metadata.json b/assets/queries/terraform/alicloud/cmk_is_unusable/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "52a5ea7c",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "693"
 }
diff --git a/assets/queries/terraform/alicloud/cs_kubernetes_node_pool_auto_repair_disabled/metadata.json b/assets/queries/terraform/alicloud/cs_kubernetes_node_pool_auto_repair_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "3096639c",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "693"
 }
diff --git a/assets/queries/terraform/alicloud/disk_encryption_disabled/metadata.json b/assets/queries/terraform/alicloud/disk_encryption_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "68bbdfee",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/assets/queries/terraform/alicloud/ecs_data_disk_kms_key_id_undefined/metadata.json b/assets/queries/terraform/alicloud/ecs_data_disk_kms_key_id_undefined/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "04c57e20",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/assets/queries/terraform/alicloud/high_kms_key_rotation_period/metadata.json b/assets/queries/terraform/alicloud/high_kms_key_rotation_period/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "7961c2d3",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/.../terraform/alicloud/kubernetes_cluster_without_terway_as_cni_network_plugin/metadata.json b/.../terraform/alicloud/kubernetes_cluster_without_terway_as_cni_network_plugin/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "7c27643e",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "693",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/terraform/alicloud/launch_template_is_not_encrypted/metadata.json b/assets/queries/terraform/alicloud/launch_template_is_not_encrypted/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "e9336717",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/assets/queries/terraform/alicloud/log_retention_is_not_greater_than_90_days/metadata.json b/assets/queries/terraform/alicloud/log_retention_is_not_greater_than_90_days/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "11d4fc85",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/terraform/alicloud/nas_file_system_not_encrypted/metadata.json b/assets/queries/terraform/alicloud/nas_file_system_not_encrypted/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "fb3675d5",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/assets/queries/terraform/alicloud/nas_file_system_without_kms/metadata.json b/assets/queries/terraform/alicloud/nas_file_system_without_kms/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "5fb1326b",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/assets/queries/terraform/alicloud/no_ros_stack_policy/metadata.json b/assets/queries/terraform/alicloud/no_ros_stack_policy/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "199b3f61",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "829"
 }
diff --git a/...ueries/terraform/alicloud/oss_bucket_allows_all_actions_from_all_principals/metadata.json b/...ueries/terraform/alicloud/oss_bucket_allows_all_actions_from_all_principals/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "5507d429",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_allows_delete_from_all_principals/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_allows_delete_from_all_principals/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "ee07e6f5",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "732",
   "oldSeverity": "HIGH"
 }
diff --git a/...ueries/terraform/alicloud/oss_bucket_allows_list_action_from_all_principals/metadata.json b/...ueries/terraform/alicloud/oss_bucket_allows_list_action_from_all_principals/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "b22a7d83",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "200"
 }
diff --git a/...queries/terraform/alicloud/oss_bucket_allows_put_action_from_all_principals/metadata.json b/...queries/terraform/alicloud/oss_bucket_allows_put_action_from_all_principals/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "14d65676",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "732",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_cmk_encryption_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_cmk_encryption_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "5907ee8c",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "311"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_has_static_website/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_has_static_website/metadata.json
@@ -3,10 +3,10 @@
   "queryName": "OSS Bucket Has Static Website",
   "severity": "HIGH",
   "category": "Insecure Configurations",
-  "descriptionText": "Checks if any static websties are hosted on buckets. Be aware of any website you are running.",
+  "descriptionText": "Checks if any static websites are hosted on buckets. Be aware of any website you are running.",
   "descriptionUrl": "https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/oss_bucket#website",
   "platform": "Terraform",
   "descriptionID": "4c0903ce",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "200"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_ip_restriction_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_ip_restriction_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "93cebe21",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "285"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_lifecycle_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_lifecycle_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "66609561",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "664"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_logging_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_logging_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "c4a5fdbb",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_public_access_enabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_public_access_enabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "d8096622",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_transfer_acceleration_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_transfer_acceleration_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "19899aaa",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "693"
 }
diff --git a/assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "749f1287",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "710"
 }
diff --git a/assets/queries/terraform/alicloud/oss_buckets_securetransport_disabled/metadata.json b/assets/queries/terraform/alicloud/oss_buckets_securetransport_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "2b43b0a7",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "326",
   "oldSeverity": "HIGH"
 }
diff --git a/...ueries/terraform/alicloud/public_security_group_rule_all_ports_or_protocols/metadata.json b/...ueries/terraform/alicloud/public_security_group_rule_all_ports_or_protocols/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "6dcb70e8",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/terraform/alicloud/public_security_group_rule_sensitive_port/metadata.json b/assets/queries/terraform/alicloud/public_security_group_rule_sensitive_port/metadata.json
@@ -9,5 +9,5 @@
   "descriptionID": "717c49e0",
   "aggregation": 63,
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/terraform/alicloud/public_security_group_rule_unknown_port/metadata.json b/assets/queries/terraform/alicloud/public_security_group_rule_unknown_port/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "a2097952",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...aform/alicloud/ram_account_password_policy_max_login_attempts_unrecommended/metadata.json b/...aform/alicloud/ram_account_password_policy_max_login_attempts_unrecommended/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "6a2e9c34",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "307",
   "oldSeverity": "HIGH"
 }
diff --git a/...rraform/alicloud/ram_account_password_policy_max_password_age_unrecommended/metadata.json b/...rraform/alicloud/ram_account_password_policy_max_password_age_unrecommended/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "6056f5ca",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "521"
 }
diff --git a/.../terraform/alicloud/ram_account_password_policy_not_required_minimum_length/metadata.json b/.../terraform/alicloud/ram_account_password_policy_not_required_minimum_length/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "a8b47743",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "521",
   "oldSeverity": "HIGH"
 }
diff --git a/...queries/terraform/alicloud/ram_account_password_policy_not_required_numbers/metadata.json b/...queries/terraform/alicloud/ram_account_password_policy_not_required_numbers/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "0ee40b1d",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "521",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...queries/terraform/alicloud/ram_account_password_policy_not_required_symbols/metadata.json b/...queries/terraform/alicloud/ram_account_password_policy_not_required_symbols/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "f3616c34",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "521",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...ies/terraform/alicloud/ram_account_password_policy_without_reuse_prevention/metadata.json b/...ies/terraform/alicloud/ram_account_password_policy_without_reuse_prevention/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "2210f1f7",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "521"
 }
diff --git a/...d/ram_password_security_policy_not_require_at_least_one_lowercase_character/metadata.json b/...d/ram_password_security_policy_not_require_at_least_one_lowercase_character/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "b482b843",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "521",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...d/ram_password_security_policy_not_require_at_least_one_uppercase_character/metadata.json b/...d/ram_password_security_policy_not_require_at_least_one_uppercase_character/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "5adbc73e",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "521",
   "oldSeverity": "MEDIUM"
 }
diff --git a/...rraform/alicloud/ram_policy_admin_access_not_attached_to_users_groups_roles/metadata.json b/...rraform/alicloud/ram_policy_admin_access_not_attached_to_users_groups_roles/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "d529825f",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "285",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/ram_policy_attached_to_user/metadata.json b/assets/queries/terraform/alicloud/ram_policy_attached_to_user/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Terraform",
   "descriptionID": "c3be65a4",
   "cloudProvider": "alicloud",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/terraform/alicloud/ram_security_preference_not_enforce_mfa/metadata.json b/assets/queries/terraform/alicloud/ram_security_preference_not_enforce_mfa/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "6131e90d",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "287",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/rds_instance_address_publicly_accessible/metadata.json b/assets/queries/terraform/alicloud/rds_instance_address_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "d23dc3f9",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "668",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/rds_instance_events_not_logged/metadata.json b/assets/queries/terraform/alicloud/rds_instance_events_not_logged/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "c731d8ad",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/terraform/alicloud/rds_instance_log_connections_disabled/metadata.json b/assets/queries/terraform/alicloud/rds_instance_log_connections_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "0a96bec0",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/terraform/alicloud/rds_instance_log_disconnections_disabled/metadata.json b/assets/queries/terraform/alicloud/rds_instance_log_disconnections_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Terraform",
   "descriptionID": "67ec659b",
   "cloudProvider": "alicloud",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "LOW"
 }