From 4de9818bee32f2cb4fa0a6f46854d6bde0e05e51 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Sun, 1 May 2016 20:16:30 -0400 Subject: [PATCH] original CVE used in test does not exist in the current default DB used for tests. --- .../dependencycheck/data/nvdcve/CveDBIntegrationTest.java | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/dependency-check-core/src/test/java/org/owasp/dependencycheck/data/nvdcve/CveDBIntegrationTest.java b/dependency-check-core/src/test/java/org/owasp/dependencycheck/data/nvdcve/CveDBIntegrationTest.java index 01ad0f740..7cc99f67a 100644 --- a/dependency-check-core/src/test/java/org/owasp/dependencycheck/data/nvdcve/CveDBIntegrationTest.java +++ b/dependency-check-core/src/test/java/org/owasp/dependencycheck/data/nvdcve/CveDBIntegrationTest.java @@ -74,6 +74,7 @@ public class CveDBIntegrationTest extends BaseDBTestCase { } } } + /** * Test of getVulnerability method, of class CveDB. */ @@ -83,8 +84,8 @@ public class CveDBIntegrationTest extends BaseDBTestCase { try { instance = new CveDB(); instance.open(); - Vulnerability result = instance.getVulnerability("CVE-2015-3225"); - assertTrue(result.getDescription().contains("lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2")); + Vulnerability result = instance.getVulnerability("CVE-2014-0094"); + assertEquals("The ParametersInterceptor in Apache Struts before 2.3.16.1 allows remote attackers to \"manipulate\" the ClassLoader via the class parameter, which is passed to the getClass method.", result.getDescription()); } finally { if (instance != null) {