BLblackkitetech
Findings

Get a cdn security finding of a company.

A content delivery network (CDN) is a large distributed system of servers deployed in multiple data centers across the Internet. Companies use CDNs for online libraries like JQuery. This section analyzes the CDN content to detect possible vulnerabilities. This category has 3% effect on total scan score.<br/><br/> For storage optimization, the system <b>permanently</b> deletes all findings that haven't been detected by the Black Kite scanner for over a year. Findings with manually changed statuses or associated tickets are excluded.

get/api/v2/companies/{id}/findings/cdnsecurity/{findingId}

Request

Path parameters

idinteger required

The id of the company that includes finding.

findingIdinteger required

The id of the target finding.

Response

Success

FindingIdinteger

The unique identifier of this finding.

Domainstring

The domain which this finding is related.

Severity'Info' | 'Low' | 'Medium' | 'High' | 'Critical'

The severity of a finding.

Status'Active' | 'FalsePositive' | 'Suppressed' | 'Acknowledged' | 'Deleted' | 'Remediated'

The status of this finding.

  • Active, means the finding is still active with no review as of yet.
  • FalsePositive, means the finding is considered to be false alarm.
  • Suppressed, means the finding is suppressed, similar to FalsePositive.
  • Acknowledged, means the finding is accepted, for example will not be fixed.
  • Deleted, means the finding is deleted, similar to FalsePositive.
  • Remediated, means the finding is mitigated.
FindingDatestring date-time

The date that Black Kite first seen the finding.

LastCheckDatestring date-time

The date that Black Kite last checked the finding.

ControlIdstring

The unique identifier of the control that this finding relates to.

Detailstring

A short detail specific to the finding. Possibly HTML formatted.

Section'Blacklisted Parked IP's' | 'CDN Security Findings' | 'Unpatched Parked Domains'

Whether this finding is related to Blacklisted Parked IP's, CDN Security Findings or Unpatched Parked Domains.

Sourcestring

This field is only related to Blacklisted Parked IP findings. It contains the blacklist source used to find this finding.

Typestring

The type of the CDN finding; issue, bug, Black Kite and even -. Here, 'issue' represents a situation that may block work or is currently blocking work, whereas, 'bug' represents a problem or potential problem in a system.

Titlestring

The specific title of the finding instance. This field is different from the title related to the security control referenced by the ControlId.

Componentstring

The name of the component related to the finding. It can also reflect other than a software component, and take values such as 'reputation', because this field's value can also be related to Blacklisted Parked IP findings.

Assetstring

This field is only related to Blacklisted Parked IP findings. The value points to the 'parked' domain whose IP address is blacklisted.

Subdomainstring

The subdomain that the JS component served from.

Hostnamestring

The URL of the related to the finding. This field can also be an IP address, because it can also be related to Blacklisted Parked IP findings.

HostnameTypestring

The kind of the component related to the finding, such as 'outboundjs' or 'inboundjs'. The value can also be related to Blacklisted Parked IP findings and may point to the source of the blacklisting source, such as; 'ip2location Proxy Ipv4 List', 'AbuseIpDb Ip List', 'cta_cryptowall'.

Cvesstring[] nullable
Referencesstring[] nullable
ConfidenceLevel'Low' | 'Medium' | 'High' | 'VeryHigh' nullable

The confidence level of this finding.

UpdateDatestring date-time nullable

The date that the finding was last updated.

Example response

{
  "FindingId": 2590965999,
  "Domain": "acmeinc.com",
  "Severity": "Medium",
  "Status": "Active",
  "FindingDate": "2021-08-09T08:30:30.682Z",
  "LastCheckDate": "2021-08-09T08:30:30.682Z",
  "ControlId": "FRADOM-001",
  "Ticket": {
    "Status": "Assigned",
    "Owner": "John Doe"
  },
  "Detail": "X-Content-Type-Options header not found",
  "Section": "CDN Security Findings",
  "Source": "issue",
  "Type": "bug",
  "Title": "parseHTML() executes scripts in event handlers",
  "Component": "jquery",
  "Asset": "acmecdn.com",
  "Subdomain": "acmecdn.com",
  "Hostname": "https://www.acmeinc.com/js/jquery-1.11.0.js",
  "HostnameType": "inboundjs",
  "Cves": [
    "CVE-2016-2321"
  ],
  "References": [
    "https://github.com/jquery/issues/2321"
  ],
  "ConfidenceLevel": "High",
  "UpdateDate": "2021-08-09T08:30:30.682Z"
}

Changes

No recorded changes to this operation across all 8 revisions of this API.