severities

PaytmLabs · Sep 29, 2020 · 30866a2 · 30866a2
1 parent 1eed020
commit 30866a2
Show file tree

Hide file tree

Showing 7 changed files with 9 additions and 9 deletions.
diff --git a/rules/discovery/rule_artifactory.py b/rules/discovery/rule_artifactory.py
@@ -5,7 +5,7 @@
 class Rule:
   def __init__(self):
     self.rule = 'DSC_SSB9'
-    self.rule_severity = 1
+    self.rule_severity = 2
     self.rule_description = 'Checks for Artifactory Panels'
     self.rule_confirm = 'Identified an Artifactory Panel'
     self.rule_details = ''

diff --git a/rules/discovery/rule_aspconfig.py b/rules/discovery/rule_aspconfig.py
@@ -5,11 +5,11 @@
 class Rule:
   def __init__(self):
     self.rule = 'DSC_GEG2'
-    self.rule_severity = 1
+    self.rule_severity = 2
     self.rule_description = 'Checks for ASP.NET Configs'
     self.rule_confirm = 'Identified an ASP.NET Config'
     self.rule_details = ''
-    self.rule_mitigation = '''Identify whether the application in question is supposed to be exposed to the network.'''
+    self.rule_mitigation = '''Identify whether the configuration file is supposed to be exposed to the network.'''
     self.rule_match_string = {    
     '/web.config':{
       'app':'ASPNET_CONFIG',

diff --git a/rules/discovery/rule_composer.py b/rules/discovery/rule_composer.py
@@ -5,11 +5,11 @@
 class Rule:
   def __init__(self):
     self.rule = 'DSC_38A9'
-    self.rule_severity = 1
+    self.rule_severity = 2
     self.rule_description = 'Checks for Composer JSON'
     self.rule_confirm = 'Identified a Composer JSON'
     self.rule_details = ''
-    self.rule_mitigation = '''Identify whether the application in question is supposed to be exposed to the network.'''
+    self.rule_mitigation = '''Identify whether the file in question is supposed to be exposed to the network.'''
     self.rule_match_string = {
     '/composer.json':{
       'app':'COMPOSER_JSON',

diff --git a/rules/discovery/rule_django-rest.py b/rules/discovery/rule_django-rest.py
@@ -5,7 +5,7 @@
 class Rule:
   def __init__(self):
     self.rule = 'DSC_BSZ2'
-    self.rule_severity = 1
+    self.rule_severity = 2
     self.rule_description = 'Checks for Django API Endpoints'
     self.rule_confirm = 'Identified a Django API Endpoint'
     self.rule_details = ''

diff --git a/rules/discovery/rule_docker-registry.py b/rules/discovery/rule_docker-registry.py
@@ -5,7 +5,7 @@
 class Rule:
   def __init__(self):
     self.rule = 'DSC_55A9'
-    self.rule_severity = 1
+    self.rule_severity = 3
     self.rule_description = 'Checks for Docker Registry Endpoints'
     self.rule_confirm = 'Identified a Docker Registry Endpoint'
     self.rule_details = ''

diff --git a/rules/discovery/rule_flyway.py b/rules/discovery/rule_flyway.py
@@ -6,7 +6,7 @@ class Rule:
   def __init__(self):
     self.rule = 'DSC_3GGB'
     self.rule_severity = 1
-    self.rule_description = 'Checks for Flywway App'
+    self.rule_description = 'Checks for Flyway App'
     self.rule_confirm = 'Identified a Flyway App'
     self.rule_details = ''
     self.rule_mitigation = '''Identify whether the application in question is supposed to be exposed to the network.'''

diff --git a/rules/discovery/rule_globalprotect.py b/rules/discovery/rule_globalprotect.py
@@ -6,7 +6,7 @@ class Rule:
   def __init__(self):
     self.rule = 'DSC_100F'
     self.rule_severity = 1
-    self.rule_description = 'Checks for GLobal Protect Panels'
+    self.rule_description = 'Checks for Global Protect Panels'
     self.rule_confirm = 'Identified a Global Protect Panel'
     self.rule_details = ''
     self.rule_mitigation = '''Identify whether the application in question is supposed to be exposed to the network.'''