I don't find how to configure the plugin

Question

I don't find how to configure the plugin

Closed this issue 4 years ago · 8 comments

Describe the bug
See title

System Specifications (please complete the following information):

GLPI Server OS: Debian 10
Browser Chrome
Plugin version 1.0.0

Additional context
I installed the plugin by cloning the git repo in the /plugins/ folder of GLPI. It appeared in the plugin menu, I installed and activated it.
Now, I guess I neet to tell him where to find the cve server but I don't see any config page :-/
The "Plugin > CVEs" page is blank.

Thanks for your work, Curtis :-)

Answer 1 · 2021-05-04T11:08:02.000Z

The settings are in Setup > General on the CVE tab.

…

On Tue, May 4, 2021, 5:37 AM Jean-Christophe Pirmolin < ***@***.***> wrote: *Describe the bug* See title *System Specifications (please complete the following information):* - GLPI Server OS: Debian 10 - Browser Chrome - Plugin version 1.0.0 *Additional context* I installed the plugin by cloning the git repo in the /plugins/ folder of GLPI. It appeared in the plugin menu, I installed and activated it. Now, I guess I neet to tell him where to find the cve server but I don't see any config page :-/ The "Plugin > CVEs" page is blank. Thanks for your work, Curtis :-) — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEG4CLNDTDXSU3OWBPPLICLTL654RANCNFSM44CLRC3Q> .

Answer 2 · 2021-05-04T12:03:30.000Z

Damn, I must be tired... Thanks a lot :)
Found them.
I added the CVE Search URL in the general > CVE tab but the CVEs page is still blank :-(
I tested from the GLPI server itself and made a curl on the URL, it works (so the network connectivity between GLPI and CVE is OK).
Still white page :-(

Any suggestion ?
Thanks !

Answer 3 · 2021-05-04T12:37:06.000Z

I'm not sure. The last time I worked on this was a while ago when they were in the middle of an API update so it is possible it isn't compatible anymore. Any errors in the php-errors log?

…

On Tue, May 4, 2021, 8:03 AM Jean-Christophe Pirmolin < ***@***.***> wrote: Damn, I must be tired... Thanks a lot :) Found them. I added the CVE Search URL in the general > CVE tab but the CVEs page is still blank :-( I tested from the GLPI server itself and made a curl on the URL, it works (so the network connectivity between GLPI and CVE is OK). Still white page :-( Any suggestion ? Thanks ! — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEG4CLP67EJVQ2HZJ7U4MBTTL7PCNANCNFSM44CLRC3Q> .

Answer 4 · 2021-05-04T13:35:15.000Z

Indeed, sorry for my bad troubleshooting skills.
Here is the php-error log content :

[2021-05-04 15:34:01] glpiphplog.CRITICAL:   *** Uncaught Exception TypeError: Argument 2 passed to PluginCveApi::getCVEByVendorAndProduct() must be of the type string, null given, called in /data/www/html/glpi_j-1/plugins/cve/inc/cve.class.php on line 239 in /data/www/html/glpi_j-1/plugins/cve/inc/api.class.php at line 236
  Backtrace :
  plugins/cve/inc/cve.class.php:239                  PluginCveApi::getCVEByVendorAndProduct()
  plugins/cve/front/cve.php:27                       PluginCveCve::showCVEs()

Answer 5 · 2021-05-06T03:23:56.000Z

😕 I just tested the plugin and it was working properly for me. The error shown indicates one or more of your software items may have a missing name.
You can try adding the following:

if (empty($data['product'])) {
    continue;
}

after the empty check for the vendor in plugins/cve/inc/cve.class.php on line 239. This will just skip over those invalid software items.

Answer 6 · 2021-05-06T13:05:56.000Z

thanks for your answer.
Indeed, it works better :-)
I still have some errors about some software name (the one that contains some accent characters) but it is not important right now.

I will explore all this.
Thanks !

Answer 7 · 2021-05-06T13:10:15.000Z

Yes for accents I think I need to test them. I don't know if they would match up with the CVE software list or how their API handles them.

…

On Thu, May 6, 2021, 9:06 AM Jean-Christophe Pirmolin < ***@***.***> wrote: thanks for your answer. Indeed, it works better :-) I still have some errors about some software name (the one that contains some accent characters) but it is not important right now. I will explore all this. Thanks ! — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEG4CLIDGOOAAG5C4NDPHQDTMKH4XANCNFSM44CLRC3Q> .

Answer 8 · 2021-05-11T23:00:20.000Z

Since you were able to configure the plugin and get it working at least as much as to be expected since it is an incomplete plugin, I'll go ahead and close this issue.