On Sunday 30 October 2011 18:44:48 Jan-Oliver Wagner wrote:
> as discussed multiple time here and there, I formed a CR
> from the idea/need to have any NVT associated with a CVSS.
>
> http://www.openvas.org/openvas-cr-58.html
>
> The most demanding part of this work is likely the CVSS
> determination for 4500 NVTs. Perhaps the number will drop
> after doing CR58 where many can be set to 0.0.
after CR57, of course.
> But we would still need a concerted action to handle that
> many NVTs. IMHO the gain is worth it.
>
> Any opinions and comments welcome!
What about the temporal score?
How relevant is the risk_factor meta tag for the processing?
Will OpenVAS-4 have trouble if risk_factor tag is missing?
I guess we can prepare OpenVAS-5 to apply usual rule for risk_factor
if missing, based on CVSS.
Discussion welcome! This would be next CR to get ready for voting.
Best
Jan
--
Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-plugins mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
