[Openvas-devel] Call for vote: CR58: NVT Feed CVSS consolidation

Thomas Reinke lists at securityspace.com
Fri Dec 2 07:31:13 CET 2011


I've been seriously torn on this one, as to whether to abstain or not.

With tests without CVEs, the mapping of risk level to a static CVSS
value without consideration of the scoring algorithm that is used
for true CVSS calculation introduces an inconsistency that would
call into question the true value of the CVSS scores within nasl
scripts.

Regrettably, I vote -1.

Thomas

Chandrashekhar B wrote:
> +1
> 
> Chandra.
> 
> -----Original Message-----
> From: openvas-devel-bounces at wald.intevation.org
> [mailto:openvas-devel-bounces at wald.intevation.org] On Behalf Of Jan-Oliver
> Wagner
> Sent: Friday, December 02, 2011 4:12 AM
> To: openvas-devel at wald.intevation.org
> Subject: [Openvas-devel] Call for vote: CR58: NVT Feed CVSS consolidation
> 
> Hello,
> 
> I'd like to call for a vote on Change Request #58 (NVT Feed CVSS
> consolidation): http://www.openvas.org/openvas-cr-58.html
> 
> My vote is +1.
> 
> All the best
> 
> 	Jan
> 
> --
> Dr. Jan-Oliver Wagner |  ++49-541-335084-0  |  http://www.greenbone.net/
> Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR
> B 202460
> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
> _______________________________________________
> Openvas-devel mailing list
> Openvas-devel at wald.intevation.org
> http://lists.wald.intevation.org/mailman/listinfo/openvas-devel
> 
> _______________________________________________
> Openvas-devel mailing list
> Openvas-devel at wald.intevation.org
> http://lists.wald.intevation.org/mailman/listinfo/openvas-devel
> 




More information about the Openvas-devel mailing list