Commit Graph

345 Commits (2.4)

Author SHA1 Message Date
iglocska 5341967f25 chg: [version] VERSION bump 2018-06-07 17:03:11 +02:00
iglocska 2be71c596c version bump 2018-05-14 23:22:18 +02:00
iglocska 4a72c1b669 chg: Version bump 2018-04-21 23:33:20 +02:00
iglocska 8a886dd628 chg: Version bump 2018-03-23 11:57:35 +01:00
Alexandre Dulaunoy 4f2fd00f0d
chg: version bump 2018-02-21 10:30:27 +01:00
iglocska f6b9e07986 chg: version bump 2018-01-28 17:48:37 +01:00
iglocska cbcf3ac7b5 chg: Version bumped 2018-01-15 17:42:40 +01:00
iglocska e1900ba7ee chg: Version bumps for everyone! 2017-12-22 17:46:07 +01:00
iglocska ced7db17e9 fix: Fixed a critical issue introduced in 2.4.83 blocking the synchronisation of edits in certain situations
- events being edited didn't set the locked = 1 flag on push

- as reported by SIEMENS
2017-12-06 17:24:39 +01:00
iglocska fd8c4ede24 chg: Version strings updated 2017-12-06 00:24:04 +01:00
iglocska 329729e343 chg: Version bump 2017-10-27 15:55:49 +02:00
iglocska d0e99c061e new: Further progress on the graphing
- also, added new icon field to galaxies
2017-10-08 15:32:26 +02:00
iglocska f61fb8190e chg: Version bumps all around 2017-09-18 17:26:01 +02:00
iglocska 74894a6c95 chg: Update for the version release
- querystring bump
- version bump
- PyMISP version bump
2017-08-25 14:40:35 +02:00
iglocska b0ac802a86 chg: Version bump 2017-08-06 12:39:10 +02:00
iglocska 722b129b77 chg: version bump 2017-07-12 15:43:45 +02:00
iglocska 2fa5cd6c3d chg: VERSION bump 2017-06-20 14:48:14 +02:00
iglocska 31b14f69eb chg: version bump 2017-06-12 22:54:37 +02:00
iglocska 464684cf61 chg: VERSION bump 2017-05-30 18:10:47 +02:00
iglocska 97109a0b4b fix: Version bump 2017-05-08 16:23:50 +02:00
iglocska 91bbb2f635 chg: Version bump 2017-04-14 17:27:43 +02:00
iglocska 3081d7e644 chg: version bump 2017-04-11 15:18:25 +02:00
iglocska 033c535e59 chg: Version bump 2017-03-26 18:23:55 +02:00
iglocska 0aa422e90e fix: version bump 2017-03-10 20:12:21 +01:00
iglocska 3ac98ed065 Version bump 2017-03-08 15:03:55 +01:00
iglocska ac460f16c0 Version bump 2017-02-24 19:57:26 +01:00
Alexandre Dulaunoy 5337fc61c6 fix: version bump 2.4.66 2017-02-18 09:46:24 +01:00
iglocska 60b888ae75 Version bump 2017-02-09 07:23:42 +01:00
iglocska f39eb469d3 chg: version bump 2017-02-06 18:56:29 +01:00
iglocska 3509caf198 chg: version bump and changed default session engine to php 2017-01-31 10:38:19 +01:00
iglocska ba034550c5 chg: version bump 2017-01-26 01:54:14 +01:00
Iglocska cf6337868e chg: Version bump 2017-01-22 18:53:41 +01:00
Iglocska 784615684c chg: Version bump 2017-01-17 12:06:08 +01:00
iglocska b68a37ec79 chg: Version bump 2017-01-01 19:53:47 +01:00
iglocska ffe880621e new: Disable correlation
- globally
- on an event level
- on an attribute level
2016-12-22 15:30:06 +01:00
iglocska 6778d0dad5 new: Added a way to disable certain tags from the UI, fixes #1733
- also added a new setting to set the default posture when an event containing a tag is pushed (via the API/sync/etc)
  - new setting allows to automatically set new tags to hidden

- the hidden setting only hides the tags from the tag selection when tagging an event
2016-12-16 15:44:10 +01:00
Iglocska 5ab2c6a365 chg: version bump 2016-12-07 07:35:37 +01:00
Iglocska 76d7025c0e chg: Version bump 2016-11-21 17:35:19 +01:00
Iglocska bcdd819bfe Version bump 2016-11-04 16:18:13 +01:00
Iglocska 2f39b4494c Version bump 2016-10-21 15:34:40 +02:00
Iglocska 503661a240 new: First implementation of the freetext feed pull 2016-10-07 17:33:54 +02:00
iglocska 4645566063 chg: Version bump 2016-08-28 21:59:14 +02:00
iglocska b1990e777a Version bump 2016-08-10 16:58:47 +02:00
Iglocska 88df87cbdf chg: Version bump 2016-07-20 00:14:29 +02:00
Iglocska 3f25c9d26e chg: Version bump 2016-06-08 21:59:25 +02:00
Iglocska f07972af43 fix: Reverted a change that broke PyMISP's copy_list.py To be revisited for a better solution 2016-05-25 01:49:16 +02:00
Iglocska 470c8ec1a9 fix: Fixed some wonky behaviour with the popover enrichment and the warning list popover 2016-05-23 11:56:27 +02:00
Iglocska d02adf2085 new: Added the news functionality back
- admins can add/edit/delete news items
- users get redirected if there is a newsitem that they haven't seen yet
2016-05-20 01:17:26 +02:00
Iglocska 7ec1d1461e fix: Fix to an issue with server urls having a trailing slash causing an invalid sharing group server detection 2016-05-12 15:22:53 +02:00
Iglocska a2bf43c88e fix: Several issues with the soft delete resolved 2016-05-10 17:39:27 +02:00
Iglocska 769f5e11f5 chg: Filter event index for my own events
- Part of the initiative for a happier Andrzej
2016-05-05 15:05:25 +02:00
Iglocska 207c8262f8 chg: Version bump 2016-04-28 17:16:23 +02:00
Iglocska 3e12a9f11a new: Favourite tags
- Add a tag to your favourites list
- When tagging events there is a new setting: Favourite tags, which only contains the tags you've selected
2016-04-28 15:39:44 +02:00
Iglocska 8db889ce7e SMIME changes
- tied into auto upgrade system
- tied into server settings
- some cleanup of overly verbose debug
- Enforcing enable/disable everywhere
- Changed temporary file structure
2016-04-26 16:40:12 +02:00
Iglocska f8005ac1aa Warninglists WIP 2016-04-21 22:58:49 +02:00
Iglocska 41141ab02b Version bump 2016-04-18 09:01:02 +02:00
Iglocska ddcc4ca0ca Version bump 2016-04-15 15:59:13 +02:00
Iglocska 25ab7459e9 Added a way to block old publish alerts from going out. 2016-04-15 09:16:50 +02:00
Iglocska d00d4fcb27 Version bump 2016-04-08 10:18:51 +02:00
Iglocska 32f3ce8542 Destroy sessions on next page load for all users if there was a db update 2016-03-30 23:35:56 +02:00
Iglocska fea6c35140 Split the tagging permission into two
- New permission flag: perm_tag_editor
  - taggers can tag events with existing tags
  - tag editors can create / edit / delete tags

- Fixed several misleading UI elements for tagging
  - tagging users that don't own an event and aren't creators thereof cannot tag them
  - this was enforced before but the UI elements were present and threw errors

- Migration is automatic
  - all existing tagger roles will automatically become tag editors
  - restricting current roles takes manual admin action, but the functionality should remain unchanged for those that just update
2016-03-30 18:32:17 +02:00
Iglocska c95b94a9a8 Fix to an issue with the password reset breaking the credentials
- The password change forced on users by administrators couldn't save new passwords
- instead it reset the password to a new random password

- Resetting the password of such users via the admin interface should fix the issue
- Alternatively manually setting the password also fixes it
2016-03-30 09:39:00 +02:00
Iglocska b52584a4b6 Verision bump 2016-03-28 09:36:50 +02:00
Iglocska 9695c9b7bc Version bump 2016-03-27 12:16:27 +02:00
Iglocska 2a4777202d Version bump 2016-03-21 22:07:47 +01:00
Iglocska a58051fce2 Re-added a feed 2016-03-11 17:47:55 +01:00
Iglocska 8e3c209131 Version bump 2016-03-10 17:29:00 +01:00
Iglocska e1b384c5b0 Scheduled push incorrectly used the user e-mail address instead of a user object to initiate the sync, fixes #1000 2016-03-09 11:25:05 +01:00
Iglocska a593a7a148 Version bump 2016-03-07 15:14:55 +01:00
Iglocska 59996c3a8a Version bump 2016-02-22 09:57:56 +01:00
Iglocska aa9c3d9fe6 Mass-accepting proposals did not work, fixes #959
- fixed a legacy style org lookup
2016-02-21 23:29:01 +01:00
Iglocska d1d6b9e5b4 Version bump 2016-02-19 13:59:39 +01:00
Iglocska 1ba8d1c1f0 Added correlations on a proposal level
- tied into automatic datamodel updates
- correlation is one way only (from proposal to attribute)
- proposals don't correlate with one another

- all distribution rules are adhered to
- further improvements on the upgrade mechanism pipeline
2016-02-17 14:43:33 +01:00
Iglocska 2f27255d10 Version bump 2016-02-16 00:08:26 +01:00
Iglocska b8ecd9fee1 Version bump and footer version fix 2016-02-13 13:14:26 +01:00
Iglocska f81960f6ca Version bump 2016-02-11 15:45:45 +01:00
Iglocska af57c7fe62 Version bump 2016-02-02 15:32:02 +01:00
Iglocska 23b091755d Version bump 2016-02-02 09:37:48 +01:00
Iglocska 0357ec2558 Version bump 2016-01-29 14:32:41 +01:00
Iglocska 9df5c7703b Version bump 2016-01-28 10:22:37 +01:00
Iglocska be62a6b053 Entering a valid controller/action and an invalid one produced a different result pre-auth
- not authenticated users now automatically get redirected to the login page, no matter what action they requested
- This as a nice side effect also removed the bug that was caused by a site admin looking at an admin function before logging out / timing out and being incorrectly redirected to /admin/users/login
2016-01-21 14:52:06 +01:00
Iglocska 999a449cc3 Update to the upgrade procedure
- clearer instructions
- removal script for obsolete columns

- the removed columns can cause exceptions if not removed as described in #814
2016-01-20 11:45:23 +01:00
Iglocska 9d1ef0e22a Version bump 2016-01-20 09:35:39 +01:00
Iglocska 038d12a4c0 Fix to an issue with the XML cleanup method
- lead to the XML REST add failing
2016-01-19 15:42:57 +01:00
Iglocska f0bf6b9339 Attributes not included in the .json / .xml views of an event, leading to attachments not being synchronised, fixes #862
- it looks like I've left off the attachment encoding for the REST event view
- Should be fixed now
2016-01-19 13:47:52 +01:00
Iglocska 08ae212196 Version bump 2016-01-14 02:53:34 +01:00
Iglocska 62a20a2321 Fixed an issue where an event's sharing group ID would get set to the first available option even when a non sharing group distribution level is selected 2016-01-07 16:33:35 +01:00
Iglocska 5d7aa73e27 First version of the quick filters for the event view 2016-01-04 10:23:07 +01:00
Iglocska a06da3e90b Fixes to the first user initialisation
- updated the UserInit command line tool
- updated the built in user initialisation
2015-12-30 09:54:43 +01:00
iglocska fea225c409 Rework of the contributor field, some MYSQL.sql tweaks
- added indeces to the MYSQL.sql file
- contributors now looks for shadow attributes instead of log entries (should make the event view much faster and resolve some timeout issues on sync when the log is massive)
2015-12-27 19:00:35 +01:00
iglocska 9e3e362ea6 Fixes a bug on invalid event IDs passed to the STIX export causing long execution times, fixes #747
- Running a stix export for a specific ID that doesn't exist results in a full STIX export for the user (events visible to the user)
- This leads for an unnecesarily long export process when a quick export is expected
2015-12-26 11:32:31 +01:00
iglocska 66a90cd60c Several fixes to the exports, fixes #790
- New generic fetch attribute method was mistakenly using the order field as a condition, resulting in some exports only displaying a subset of the data
  - the fix to this fixes the issue described in #790 for text exports
- Fix to the RPZ exports not working correctly
- Fix to the horrible performance of RPZ exports
- Fix to several background worker issues with exports
2015-12-26 02:50:50 +01:00
iglocska ba8728abb9 Merge branch 'master' into 2.4-beta
Conflicts:
	VERSION.json
	app/Controller/Component/IOCImportComponent.php
2015-11-22 17:53:08 +01:00
iglocska ca51b55d6b Changes to the OpenIOC Import, fixes #725
- Removed the OpenIOC Indicator UUID persistence and moved it to a comment
  - this allows for the same OpenIOC report to be imported into separate events and won't result in a UUID collision

- Reworked the composite indicator resolver
  - more generic, allows for 3 part composites (to allow for regkeypath/regkey/regvalue combinations)

- Registry values now correctly recognised
2015-11-22 17:38:11 +01:00
iglocska 0fb9a70449 Merge branch 'master' into 2.4-beta
Conflicts:
	VERSION.json
2015-11-20 00:15:17 +01:00
iglocska 2daaee5333 Version bump 2015-11-19 16:52:25 +01:00
iglocska bda6923018 Security fix fixing an XSS issue with the templates
- as discovered and reported by Rafael Pablos García of INCIBE

- fixed a reflected XSS for template creator users when viewing a template
2015-11-17 11:58:56 +01:00
iglocska 053c27ae9a Removed a crappy solution to an issue with attributes being overwritten that was fixed a long time ago correctly on data entry 2015-11-16 19:51:38 +01:00
iglocska da5fac5873 Added logging of auth key changes, fixes #715
- Changing the auth key now creates a log entry that inclues the user's ID, e-mail address old and new autkeys
- Also removed the logging of the hashed password for newly created users
2015-11-16 00:22:58 +01:00
iglocska 697ff43465 Version bump 2015-11-14 00:03:41 +01:00
iglocska 69031ab35e Fixed an issue where PGP keys that are set to never expire show up as expired 2015-11-12 09:46:33 +01:00
iglocska 675ceb2e0e Better verification of PGP keys
- checks whether the key can be used to encrypt and whether it's expired
2015-11-11 17:03:59 +01:00
iglocska 6548297b80 Merge branch 'hotfix-2.3.154' into hotfix-2.3.155
Conflicts:
	VERSION.json
2015-11-10 15:22:10 +01:00
iglocska c46922be12 Fix to a security issue in the PGP fetching tool
- reported by RichieB2B
- The scraped URL for the PGP fetching tool was not sanitised before being echoed
2015-11-10 15:17:15 +01:00
iglocska 0d758de89b Fixed an issue where a linebreak in an event info would break the CSV export, fixes #710
- also added comment field for attributes
- until now multi line fields were both escaped and the line breaks removed
  - this was overkill, linebreaks are now kept intact
2015-11-10 13:45:40 +01:00
iglocska 8f485ef98a Fixed a bug with the attribute search API 2015-11-09 23:18:51 +01:00
iglocska 16e7974fc0 Improved logging, fixes #695
- Added logging of failed login attempts
- Added (optional) logging of successful authentications
  - admin setting that has to be enabled
  - will log all API calls (both HTTP method and target url)

- optional logging of user IP address for all logs
  - each log entry created while this setting is enabled will log the IP address of the client
  - disabling it also hides the IPs from the interface
  - added new IP field for the log search (only if enabled)
2015-11-08 22:35:46 +01:00
iglocska 42ad040d3c Removed obsolete gitignore files, fixes #704 2015-11-03 17:06:21 +01:00
iglocska 9c00d56ed4 View all proposals via the API
- Proposals that can be accepted / discarded via the API
- Can restrict the index to the proposals of a single event
2015-10-31 00:18:05 +01:00
iglocska 345e898f5f Tagging added to the API
- Create / Edit / Remove / index / view tags via the API
2015-10-30 16:28:51 +01:00
Iglocska 7a686a2718 Merge branch 'master' into 2.4-beta
Also, reworked a lot of remaining distribution checks not handled by the main fetch methods

Conflicts:
	VERSION.json
	app/Controller/AttributesController.php
	app/Controller/ShadowAttributesController.php
	app/View/ShadowAttributes/add.ctp
	app/View/ShadowAttributes/edit.ctp
2015-10-30 13:39:12 +01:00
Iglocska 059a8aa43a Added API for proposals
- APIs for the following actions:
  - Add new proposed attribute to an event
  - Add proposed change to an attribute
  - View a proposal
  - Accept a proposal
  - Discard a proposal

- new APIs described on the automation page
2015-10-28 23:32:30 +01:00
Iglocska f9da3f2d2c Small fix to the pgp key validation tool
- doesn't break on completely invalid keys anymore
2015-10-27 14:00:31 +01:00
iglocska aede05bdc6 Version bump 2015-10-27 08:34:59 +01:00
iglocska ef1d3949e7 Merge branch 'master' into feature/sg
Conflicts:
	VERSION.json
	app/Controller/ShadowAttributesController.php
	app/Lib/Tools/JSONConverterTool.php
	app/Lib/Tools/XMLConverterTool.php
	app/Model/User.php
	app/View/Elements/eventattribute.ctp
2015-10-22 09:59:00 +02:00
iglocska 6fa27d659a Reverted change in proposal file storage path that wasn't needed 2015-10-22 09:51:31 +02:00
iglocska f4f4f0f069 Version bump 2015-10-21 23:51:36 +02:00
Iglocska 7fab2ce2be Added the attribute relations to the XML / JSON output, fixes #687 2015-10-15 17:39:17 +02:00
Iglocska 3dc83778c2 Fixed the current user check while removing dead workers, fixes #685
- as pointed out by RichieB2B
2015-10-14 15:07:29 +02:00
Iglocska 888042dbd6 Added the first version of the correlation graphing
Conflicts:
	VERSION.json
2015-10-14 03:45:34 +02:00
Iglocska c9bf8105e6 Replaced get_current_user for the process owner identification, fixes #685
- As RichieB2B noted, get_current_user() gets the owner of the script in CentOS / RHEL not the user executing the script (as in Ubuntu)

- Current solution uses posix_getpwuid and posix_geteuid if the php-posix package is installed
- if not, it uses whoami
2015-10-13 10:49:55 +02:00
Iglocska f9f9eed6fd Issue fixed with open_basedir preventing the worker diagnostics from working, fixes #685
- for some users the workers appeared to be dead even though the worker processes were functional and started by the correct user
- this was due to access to /proc being blocked by open_basedir directive settings
- added a check and the corresponding view changes to this being the case
2015-10-12 16:48:43 +02:00
Iglocska 328c666e3a Merge branch 'master' into feature/sg
Merging all the new changes from master

Conflicts:
	VERSION.json
	app/Console/Command/AdminShell.php
	app/Controller/AttributesController.php
	app/Controller/EventsController.php
	app/Model/Attribute.php
	app/Model/Event.php
	app/Model/Log.php
	app/Model/Server.php
	app/Model/User.php
	app/View/Elements/side_menu.ctp
	app/View/Pages/administration.ctp
	app/View/Users/admin_index.ctp
2015-10-12 09:41:20 +02:00
Iglocska 24eae46640 Fix to a previous invalid check on the cakephp version 2015-10-09 20:51:12 +02:00
Iglocska f018c60c01 Fixed the worker diagnostics showing incorrect data under Red Hat / CentOS, fixes #685
- Under these distros, php is blocked from seeing concurrently running php processes even under the same user
- instead of running ps, the diagnostic now checks the existance of the pid file in /proc/
2015-10-09 17:09:33 +02:00
Iglocska a2f87faf1f Version bump 2015-10-09 16:25:09 +02:00
Iglocska dc638adac2 Upgrade to CakePHP 2.7, fixes #684
- cakephp submodule updated to 2.7
- make sure that you update your instance!

- not updating will not break compatibility
2015-10-09 15:59:25 +02:00
Iglocska af767bcdee version bump 2015-10-08 10:03:31 +02:00
Iglocska 5f1196eba5 Fix to an issue that blocked event blacklist entries from being added manually, fixes #676 2015-09-24 11:26:23 +02:00
Iglocska 4a75b1d2b5 Fixed an issue where the recorrelation of all events would run into memory issues
- before the recorrelation admin tool would load all attributes into memory in one go
- now it loads them in chunks of 1k attributes at a time
2015-09-24 10:36:02 +02:00
iglocska f15fcf0584 Started admin FAQ section, added info on resetting a password using the command line, fixes #624 2015-09-18 10:23:55 +02:00
iglocska 6d4678a688 Version bump 2015-09-17 16:28:01 +02:00
iglocska 7f3996f43b Added an API to quickly check the current MISP version, fixes #664 2015-09-17 00:21:08 +02:00
iglocska 1079c4a1ea Added a diagnostic to check and purge overgrown session tables 2015-09-16 18:55:28 +02:00
iglocska 14188f1367 Fix to a new bug introduced with the correlation engine
- an attribute could correlate with another attribut of the same event
2015-09-16 15:34:00 +02:00
iglocska 6e61c50867 Collection of changes / fixes
- Event blacklist functionality extended
    - Several context fields added
    - edit existing entries to change the context fields

- removed the deprecated news page

- hash attribute types get validated against empty values

- fixed an excepion on REST add of attributes when the validation stops an attribute from being entered

- fixed the parameters in some exports being ignored after a recent patch

- added an admin tool to prune orphaned attributes

- cleanup and move of the database update methods - they are now accessible from any model

- Footer now shows MISP version including sub version
2015-09-16 14:24:44 +02:00
Iglocska bc06362d19 Fixed XSS in several views
- reported by Roberto Suggi Liverani from NCIA
2015-09-09 19:26:06 +02:00
Iglocska e7b54c2c61 Fix to a serious bug with adding attributes via the API and performance fixes
- due to a bug, setting an attribute ID in the /attributes/add API call can lead to overwriting an existing attribute

performance improvements:

- massive improvements to the correlation performance
- improvements to the attribute validation process
2015-09-07 10:06:34 +02:00
Iglocska 43c2290097 Enhancements to the reportValidationIssuesAttributes action
- now also shows issues not related to the value field
- takes an optional parameter to validate a single event's attributes
2015-09-03 10:58:54 +02:00
Iglocska af0b2ffdce Version bump 2015-09-02 16:37:02 +02:00
Iglocska 20de4ba9cc Version bump 2015-09-02 10:20:49 +02:00
Iglocska 0ded8805c0 Cleanup of some mistakes 2015-08-27 13:47:54 +02:00
Iglocska 597e40fc0f Collection of fixes
- CSV export ignored the tag parameters
- tagging events didn't work as expected in some cases
- timing out and clicking on an admin action results in being redirected to a non-existing admin login page
- distribution setting ignored when uploading attachments
2015-08-27 09:44:58 +02:00
Iglocska bc4bc46fca Fix to the previous hotfix
- indexes were not created if they already existed
- this was an issue if a non unique index was present

- also made the process more verbose and added a generic method that deals with index removal
2015-08-25 11:56:29 +02:00
Iglocska 556688069a Resolved an issue that can lead to duplicate events showing up in MISP
- UUID uniqueness was previously not enforced
- changed the MYSQL.sql file to reflect the changes
- Added upgrade admin tool to remove duplicate events and make the database changes required
- Tweaked the tool for the attribute uuid fix so that it cannot created duplicate keys

- some minor fixes, such as automatically removing eventTag objects on event deletion
2015-08-25 10:32:26 +02:00
Iglocska 8d24f9a7ff version bump 2015-08-24 13:30:45 +02:00
Iglocska bd7555b185 Various fixes to the OpenIOC import and the password reset, fixes #600, fixes #599, fixes #565
- OpenIOC import now correctly sets IDS flags based on type
- OpenIOC import specifies the source file in the comments

- Fixed a blackhole issue with the password reset popups
2015-08-19 13:20:14 +02:00
Iglocska ebbc7390d1 Added event ID field to restSearch APIs, to assist #456
- eventid a new parameter for both event and attribute restsearch
- these APIs now accept arrays in both json and xml format (you can send "eventid": ["15", "16"] instead of "eventid": "15&&16" in addition to the old functionality
2015-08-18 19:51:41 +02:00
Iglocska ce2e6a769d Some fixes to the OpenIOC import tool
- added support for SHA types
- fixed an issue that caused the import to fail with duplicate attributes (the list gets pruned now)
- fixed an issue where no supplied contextual fields would lead to empty attributes being created
- removed the requirement for the files to have the .ioc extension
2015-08-18 17:16:58 +02:00
Iglocska 88a3d11d3d Version bump 2015-08-18 15:39:20 +02:00