Product not matching when multiples are list

[zroulston]

cvemap version: 0.0.4

Current Behavior:

The current behavior of cvemap presents an issue wherein the retrieval process fails to produce results when a CVE affects multiple configurations. For instance, consider CVE-2024-21762, impacting both FortiProxy and FortiOS. It is only retrieved when querying specifically for the "fortiproxy" product; however, it remains absent from searches related to "fortios".

Expected Behavior:

Ideally, when a CVE influences multiple configurations, it should be included in the search results if the queried product matches any configuration within the list.

Steps To Reproduce:

# Issue not returned
cvemap -p fortios
# Issue returned
cvemap -p fortiproxy
# Example CVE causing the issue
cvemap -id CVE-2024-21762

Anything else:

Additional details regarding CVE-2024-21762 can be found at: CVE-2024-21762 NIST Page