import * as z from "zod/v3"; import { OpenEnum } from "../../types/enums.js"; import { Result as SafeParseResult } from "../../types/fp.js"; import { SDKValidationError } from "../errors/sdkvalidationerror.js"; /** * Indicates conditions beyond the attacker’s control that must exist in order to exploit the vulnerability. The Attack Complexity metric is scored as either Low or High. There are two possible values: Low (L) – There are no specific pre-conditions required for exploitation, High (H) – The attacker must complete some number of preparatory steps in order to get access. */ export declare const CVSSv4ComponentsAttackComplexity: { readonly Unknown: ""; readonly Low: "low"; readonly High: "high"; }; /** * Indicates conditions beyond the attacker’s control that must exist in order to exploit the vulnerability. The Attack Complexity metric is scored as either Low or High. There are two possible values: Low (L) – There are no specific pre-conditions required for exploitation, High (H) – The attacker must complete some number of preparatory steps in order to get access. */ export type CVSSv4ComponentsAttackComplexity = OpenEnum; export declare const AttackRequirements: { readonly Unknown: ""; readonly None: "none"; readonly Present: "present"; }; export type AttackRequirements = OpenEnum; /** * Indicates the level of access required for an attacker to exploit the vulnerability. The Attack Vector metric is scored in one of four levels: Network (N) – Vulnerabilities with this rating are remotely exploitable, from one or more hops away, up to, and including, remote exploitation over the Internet, Adjacent (A) – A vulnerability with this rating requires network adjacency for exploitation. The attack must be launched from the same physical or logical network, Local (L) – Vulnerabilities with this rating are not exploitable over a network, Physical (P) – An attacker must physically interact with the target system. */ export declare const CVSSv4ComponentsAttackVector: { readonly Unknown: ""; readonly Network: "network"; readonly Adjacent: "adjacent"; readonly Local: "local"; readonly Physical: "physical"; }; /** * Indicates the level of access required for an attacker to exploit the vulnerability. The Attack Vector metric is scored in one of four levels: Network (N) – Vulnerabilities with this rating are remotely exploitable, from one or more hops away, up to, and including, remote exploitation over the Internet, Adjacent (A) – A vulnerability with this rating requires network adjacency for exploitation. The attack must be launched from the same physical or logical network, Local (L) – Vulnerabilities with this rating are not exploitable over a network, Physical (P) – An attacker must physically interact with the target system. */ export type CVSSv4ComponentsAttackVector = OpenEnum; export declare const Automatable: { readonly Unknown: ""; readonly No: "no"; readonly Yes: "yes"; }; export type Automatable = OpenEnum; /** * If an attack renders information unavailable, such as when a system crashes or through a DDoS attack, availability is negatively impacted. Availability has three possible values: None (N) – There is no loss of availability, Low (L) – Availability might be intermittently limited, or performance might be negatively impacted, as a result of a successful attack, High (H) – There is a complete loss of availability of the impacted system or information. */ export declare const CVSSv4ComponentsAvailability: { readonly Unknown: ""; readonly None: "none"; readonly Low: "low"; readonly High: "high"; }; /** * If an attack renders information unavailable, such as when a system crashes or through a DDoS attack, availability is negatively impacted. Availability has three possible values: None (N) – There is no loss of availability, Low (L) – Availability might be intermittently limited, or performance might be negatively impacted, as a result of a successful attack, High (H) – There is a complete loss of availability of the impacted system or information. */ export type CVSSv4ComponentsAvailability = OpenEnum; /** * Refers to the disclosure of sensitive information to authorized and unauthorized users, with the goal being that only authorized users are able to access the target data. Confidentiality has three potential values: High (H) – The attacker has full access to all resources in the impacted system, including highly sensitive information such as encryption keys, Low (L) – The attacker has partial access to information, with no control over what, specifically, they are able to access, None (N) – No data is accessible to unauthorized users as a result of the exploit. */ export declare const CVSSv4ComponentsConfidentiality: { readonly Unknown: ""; readonly None: "none"; readonly Low: "low"; readonly High: "high"; }; /** * Refers to the disclosure of sensitive information to authorized and unauthorized users, with the goal being that only authorized users are able to access the target data. Confidentiality has three potential values: High (H) – The attacker has full access to all resources in the impacted system, including highly sensitive information such as encryption keys, Low (L) – The attacker has partial access to information, with no control over what, specifically, they are able to access, None (N) – No data is accessible to unauthorized users as a result of the exploit. */ export type CVSSv4ComponentsConfidentiality = OpenEnum; /** * Refers to whether the protected information has been tampered with or changed in any way. If there is no way for an attacker to alter the accuracy or completeness of the information, integrity has been maintained. Integrity has three values: None (N) – There is no loss of the integrity of any information, Low (L) – A limited amount of information might be tampered with or modified, but there is no serious impact on the protected system, High (H) – The attacker can modify any/all information on the target system, resulting in a complete loss of integrity. */ export declare const CVSSv4ComponentsIntegrity: { readonly Unknown: ""; readonly None: "none"; readonly Low: "low"; readonly High: "high"; }; /** * Refers to whether the protected information has been tampered with or changed in any way. If there is no way for an attacker to alter the accuracy or completeness of the information, integrity has been maintained. Integrity has three values: None (N) – There is no loss of the integrity of any information, Low (L) – A limited amount of information might be tampered with or modified, but there is no serious impact on the protected system, High (H) – The attacker can modify any/all information on the target system, resulting in a complete loss of integrity. */ export type CVSSv4ComponentsIntegrity = OpenEnum; /** * Describes the level of privileges or access an attacker must have before successful exploitation. There are three possible values: None (N) – There is no privilege or special access required to conduct the attack, Low (L) – The attacker requires basic, “user” level privileges to leverage the exploit, High (H) – Administrative or similar access privileges are required for successful attack. */ export declare const CVSSv4ComponentsPrivilegesRequired: { readonly Unknown: ""; readonly None: "none"; readonly Low: "low"; readonly High: "high"; }; /** * Describes the level of privileges or access an attacker must have before successful exploitation. There are three possible values: None (N) – There is no privilege or special access required to conduct the attack, Low (L) – The attacker requires basic, “user” level privileges to leverage the exploit, High (H) – Administrative or similar access privileges are required for successful attack. */ export type CVSSv4ComponentsPrivilegesRequired = OpenEnum; export declare const ProviderUrgency: { readonly Unknown: ""; readonly Clear: "clear"; readonly Green: "green"; readonly Amber: "amber"; readonly Red: "red"; }; export type ProviderUrgency = OpenEnum; export declare const Recovery: { readonly Unknown: ""; readonly Automatic: "automatic"; readonly User: "user"; readonly Irrecoverable: "irrecoverable"; }; export type Recovery = OpenEnum; export declare const Safety: { readonly Unknown: ""; readonly Negligible: "negligible"; readonly Present: "present"; }; export type Safety = OpenEnum; /** * Describes whether a user, other than the attacker, is required to do anything or participate in exploitation of the vulnerability. User interaction has two possible values: None (N) – No user interaction is required, Required (R) – A user must complete some steps for the exploit to succeed. For example, a user might be required to install some software. */ export declare const CVSSv4ComponentsUserInteraction: { readonly Unknown: ""; readonly None: "none"; readonly Required: "required"; }; /** * Describes whether a user, other than the attacker, is required to do anything or participate in exploitation of the vulnerability. User interaction has two possible values: None (N) – No user interaction is required, Required (R) – A user must complete some steps for the exploit to succeed. For example, a user might be required to install some software. */ export type CVSSv4ComponentsUserInteraction = OpenEnum; export declare const ValueDensity: { readonly Unknown: ""; readonly Diffuse: "diffuse"; readonly Concentrated: "concentrated"; }; export type ValueDensity = OpenEnum; export declare const VulnerabilityResponseEffort: { readonly Unknown: ""; readonly Low: "low"; readonly Moderate: "moderate"; readonly High: "high"; }; export type VulnerabilityResponseEffort = OpenEnum; export type CVSSv4Components = { /** * Indicates conditions beyond the attacker’s control that must exist in order to exploit the vulnerability. The Attack Complexity metric is scored as either Low or High. There are two possible values: Low (L) – There are no specific pre-conditions required for exploitation, High (H) – The attacker must complete some number of preparatory steps in order to get access. */ attackComplexity?: CVSSv4ComponentsAttackComplexity | undefined; attackRequirements?: AttackRequirements | undefined; /** * Indicates the level of access required for an attacker to exploit the vulnerability. The Attack Vector metric is scored in one of four levels: Network (N) – Vulnerabilities with this rating are remotely exploitable, from one or more hops away, up to, and including, remote exploitation over the Internet, Adjacent (A) – A vulnerability with this rating requires network adjacency for exploitation. The attack must be launched from the same physical or logical network, Local (L) – Vulnerabilities with this rating are not exploitable over a network, Physical (P) – An attacker must physically interact with the target system. */ attackVector?: CVSSv4ComponentsAttackVector | undefined; automatable?: Automatable | undefined; /** * If an attack renders information unavailable, such as when a system crashes or through a DDoS attack, availability is negatively impacted. Availability has three possible values: None (N) – There is no loss of availability, Low (L) – Availability might be intermittently limited, or performance might be negatively impacted, as a result of a successful attack, High (H) – There is a complete loss of availability of the impacted system or information. */ availability?: CVSSv4ComponentsAvailability | undefined; /** * Refers to the disclosure of sensitive information to authorized and unauthorized users, with the goal being that only authorized users are able to access the target data. Confidentiality has three potential values: High (H) – The attacker has full access to all resources in the impacted system, including highly sensitive information such as encryption keys, Low (L) – The attacker has partial access to information, with no control over what, specifically, they are able to access, None (N) – No data is accessible to unauthorized users as a result of the exploit. */ confidentiality?: CVSSv4ComponentsConfidentiality | undefined; /** * Refers to whether the protected information has been tampered with or changed in any way. If there is no way for an attacker to alter the accuracy or completeness of the information, integrity has been maintained. Integrity has three values: None (N) – There is no loss of the integrity of any information, Low (L) – A limited amount of information might be tampered with or modified, but there is no serious impact on the protected system, High (H) – The attacker can modify any/all information on the target system, resulting in a complete loss of integrity. */ integrity?: CVSSv4ComponentsIntegrity | undefined; /** * Describes the level of privileges or access an attacker must have before successful exploitation. There are three possible values: None (N) – There is no privilege or special access required to conduct the attack, Low (L) – The attacker requires basic, “user” level privileges to leverage the exploit, High (H) – Administrative or similar access privileges are required for successful attack. */ privilegesRequired?: CVSSv4ComponentsPrivilegesRequired | undefined; providerUrgency?: ProviderUrgency | undefined; recovery?: Recovery | undefined; safety?: Safety | undefined; /** * Describes whether a user, other than the attacker, is required to do anything or participate in exploitation of the vulnerability. User interaction has two possible values: None (N) – No user interaction is required, Required (R) – A user must complete some steps for the exploit to succeed. For example, a user might be required to install some software. */ userInteraction?: CVSSv4ComponentsUserInteraction | undefined; valueDensity?: ValueDensity | undefined; vulnerabilityResponseEffort?: VulnerabilityResponseEffort | undefined; }; /** @internal */ export declare const CVSSv4ComponentsAttackComplexity$inboundSchema: z.ZodType; /** @internal */ export declare const AttackRequirements$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4ComponentsAttackVector$inboundSchema: z.ZodType; /** @internal */ export declare const Automatable$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4ComponentsAvailability$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4ComponentsConfidentiality$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4ComponentsIntegrity$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4ComponentsPrivilegesRequired$inboundSchema: z.ZodType; /** @internal */ export declare const ProviderUrgency$inboundSchema: z.ZodType; /** @internal */ export declare const Recovery$inboundSchema: z.ZodType; /** @internal */ export declare const Safety$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4ComponentsUserInteraction$inboundSchema: z.ZodType; /** @internal */ export declare const ValueDensity$inboundSchema: z.ZodType; /** @internal */ export declare const VulnerabilityResponseEffort$inboundSchema: z.ZodType; /** @internal */ export declare const CVSSv4Components$inboundSchema: z.ZodType; export declare function cvsSv4ComponentsFromJSON(jsonString: string): SafeParseResult; //# sourceMappingURL=cvssv4components.d.ts.map