Test Vulnerability Detector

[vikman90]

Description

References

Related PR: #462 #470 #508 #521 #549 #556
Branch: master
Documentation: wazuh/wazuh-documentation#241

Unit tests

• Test that the same vulnerability is not reported twice.
• Test that all vulnerabilities are reported according to the period indicated in ignore_time.
• Test the vulnerability databases for agents with Ubuntu 18, Debian 7, 8 and 9.
• Test the allow option to force detection on unsupported agents.
• Test RHSA decompression in CVEs for Red Hat vulnerabilities.
• Verify that no vulnerabilities of wrong architectures are triggered in RedHat/CentOS agents. (PR Add arch check for Red Hat's OVAL in vulnerability-detector #625)
• Verify that the vulnerability databases are deleted when updating.
• Verify that a 3.2.X configuration is accepted.
• Verify that OVAL files can be downloaded from alternate addresses.
• Verify that OVAL files can be used from local paths. (edited)

[jesusgn90]

Update

Bugs:

• Wrong alert format  #715
• Error log messages from Vulnerability #716
• Wrong OS checking in Vulnerability detector causes "duplicated" alerts #720
• Vulnerability detector stops working after some scans using low interval #723
• Better checking for Vulnerability detector configuration #725

Enhancements:

• Limit number of error downloading the OVAL file from URL on Vulnerability detector #724
• Allowing URL list for Vulnerability detector #726