获取风险详情，包括：风险标题、风险描述、安全建议、受影响资产等。

请求说明 #

• 请求方式: GET
• 请求地址: https://mcs.cn-beijing.volcengineapi.com/?Action=GetRisk&Version=2023-05-01

请求参数 #

下表仅列出该接口特有的请求参数和部分公共参数。更多信息请见公共参数。

返回参数 #

下表仅列出本接口特有的返回参数。更多信息请参见返回结构。

请求示例 #

GET /?Action=GetRisk&Version=2023-05-01&RiskID=uniform_risk_xxxxxxxxxxxxxx HTTP/1.1
Host: mcs.cn-beijing.volcengineapi.com
X-Date: 20241106T075636Z
Authorization: HMAC-SHA256 Credential=Adfks******wekfwe/20241106/cn-beijing/mcs/request, SignedHeaders=host;x-date, Signature=47a7d934ff7b37c03938******cd7b8278a40a1057690c401e92246a0e41085f

返回示例 #

{
  "ResponseMetadata": {
    "RequestId": "20241106160145236030215199160882",
    "Action": "GetRisk",
    "Version": "2023-05-01",
    "Service": "mcs",
    "Region": "cn-beijing"
  },
  "Result": {
    "RiskBaseInfo": {
      "RiskID": "uniform_risk_67126cxxxxxxxxx1f7a0d0ff",
      "RiskMetaID": "$volcengine$volc-mcs$risk_model_mc_strategy$strategy-vm-identity_auth_with_ssh_key_pair",
      "RiskLevel": "300-mid",
      "RiskName": "应要求使用 SSH 密钥对 Linux 虚拟机进行身份验证",
      "RiskTypes": [
        "auth_bypass",
        "week_password"
      ],
      "LastDetectTimeMilli": 1730432334035,
      "LastDiscoverTimeMilli": 1729673144161,
      "RiskStatus": "handled",
      "AffectedResource": {
        "CloudVendor": "volc",
        "CloudAccountUID": "547960694886468738",
        "CloudAssetType": "ComputeVm",
        "CloudAssetID": "i-2ze2exxxxixypvyycxay"
      },
      "RiskExemptMeta": {
        "ExemptReasonType": "reason_type_ignored",
        "ExemptDesc": "该条风险已处理完成，故加白。",
        "ExemptExpireTimeMilli": 0
      },
      "RiskProcessStatus": "fixing",
      "ResourceStatus": "exist",
      "SupportRepair": true,
      "SupportVerify": true,
      "RiskModelType": "risk_model_mc_strategy"
    },
    "Vuln": {
      "VulnViewID": "CVE-2022-36227",
      "VulnTitle": "libarchive 代码问题漏洞(CVE-2022-36227)",
      "VulnDesc": "libarchive是一款多格式存档和压缩库。 libarchive 3.6.1版本存在代码问题漏洞，该漏洞源于在调用calloc函数后不会检查错误，如果函数失败，calloc函数会返回NULL指针，从而导致NULL指针取消引用。攻击者利用该漏洞可以执行任意代码。",
      "VulnCategory": "vuln_type_linux",
      "AttachedResourceRiskStatus": "exempted",
      "AffectedAssetsCnt": 123,
      "VulnSolution": "漏洞修复方案内容/漏洞修复方案url",
      "VulnCvss": {
        "CvssScore": 12.34,
        "CvssVec": "6.1"
      }
    },
    "Strategy": {
      "StrategyID": "strategy-baseline_vm-enable_log_audit_process",
      "StrategyTitle": "应启用日志守护进程（audit）（linux）",
      "StrategyDesc": "确保auditd服务已启用，记录日志用于审计。",
      "RepairAdvice": "Linux系统下加固：\n运行以下命令启用auditd服务：\n\tsystemctl --now enable auditd",
      "SupportForceRepair": true,
      "ForceRepairActionName": "action_name_here",
      "ForceRepairActionUID": "action_uid_here",
      "RepairSupportAutomation": "manual_repair",
      "AffectedResourceType": "ComputeVm",
      "ResourceRiskStatus": "not_passed",
      "TaskRunning": true,
      "StrategyType": "normal_strategy",
      "StrategyImpactType": "impact_type_here"
    },
    "RepairProposalType": "StrategySecurityGroupIngressMinimumACL",
    "ReferenceData": {},
    "StrategyRiskResourceConfigInfos": [
      {
        "ResourceConfigType": "ComputeVMBasicConfigSet"
      }
    ],
    "AffectAssetCount": 123
  }
}

错误码 #

下表为您列举了该接口与业务逻辑相关的错误码。公共错误码请参见公共错误码文档。