AnsweredAssumed Answered

How to split data that is in one "cell" in CSV format

Question asked by Si Kellow on Jul 7, 2015
Latest reply on Jul 10, 2015 by Si Kellow

I've been scratching my head over this one for some time, and now I have a different report with the same issue.

 

I've run a report to list out recommended virtual patches.  I need to process this data offline in order to compare my deployed VP's against the recommendations for vulnerabilities found - so far so good.

 

Now, in the report, when I download it as CSV, I get a row like this

 

"62.xx.xxx.xxx",,,"IP","Linux 2.4-2.6 / Embedded Device / F5 Networks Big-IP","host scanned, found vuln","38602","OpenSSL Multiple Remote Security Vulnerabilities","Active","Vuln","4","443","tcp",,"over ssl","06/07/2014 00:00:12","06/19/2015 00:06:07","378","CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-0076","OpenSSL Security Advisory [05 Jun 2014]",,"5.6","6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)","5.6 (E:F/RL:OF/RC:C)","Asset Group: All, Collateral Damage Potential:  Not Defined, Target Distribution: Not Defined, Confidentiality Requirement: Not Defined, Integrity Requirement: Not Defined, Availability Requirement: Not Defined","Customers are advised to install OpenSSL versions 0.9.8za, 1.0.0m, 1.0.1h (http://www.openssl.org/related/binaries.html) or later to remediate this vulnerability.

For embedded systems, please contact the embedded system vendor for updates.

Patch:

Following are links for downloading patches to fix the vulnerabilities:

  OpenSSL Security Advisory [05 Jun 2014]: .* (https://www.openssl.org/source/)

 

 

Virtual Patches:

Trend Micro Virtual Patching(http://www.trendmicro.com/vulnerabilitycontrols)

Virtual Patch #1006089: 1006089 - OpenSSL ""do_ssl3_write()"" NULL Pointer Dereference Vulnerability

Virtual Patch #1006162: 1006162 - OpenSSL Anonymous ECDH Denial Of Service Vulnerability

Virtual Patch #1006092: 1006092 - DTLS Invalid Fragment Vulnerability (CVE-2014-0195)","yes","Open",,,"General remote services"

 

Now, in what is column Z, is the interesting data.  Is there a way to create new rows and split out the virtual patch number?  with all that data in a single cell, I can't think of a way to process the data and be able to compare against other tables

 

My ideal is to have a line with each virtual patch listed against the host IP, and nothing else eg

 

"62.xx.xxx.xxx","Virtual Patch #1006089"

"62.xx,xxx,xxx","Virtual Patch #1006162"

"62.xx.xxx.xxx","Virtual Patch #1006092"

 

Any ideas on how to get from the actual data (top) to the wanted data (just above) - I'm stuck

 

C'mon Qualys - give us CSV's with useable formats!

 

 

Si

Outcomes