[Openvas-devel] Resolving CVSS-Severity mismatches

Sébastien AUCOUTURIER s.aucouturier at itrust.fr
Tue Dec 6 08:57:38 CET 2011


Thank to point me CR42,

so no problem, you're right : No need to change this.


Le 12/6/2011 08:48, Jan-Oliver Wagner a écrit :
>
> hm, my proposal was direclty derived from CR42:
>
>   http://openvas.org/openvas-cr-42.html
>
> The ultimate goal is that users can specify their own categories
> based on the CVSS returned by the NVTs.
> Until then, it is a compromise anyway.
>
> If I am not mistaken most NVT developers assign message type according
> to CR42 (at least since we agreed on this CR)?
>
> So the most sensible approach for the transition time appeared
> to be CR42 ranges.
>

-- 
| Sébastien AUCOUTURIER | Software Design Engineer Lead | 
| ITrust | 55 rue l'Occitane BP 67303 31673 LABEGE CEDEX
| Email: s.aucouturier at itrust.fr | Fixe Sdt. 05.67.34.67.80 | Fax. 09.80.08.37.23
| IT Security Services & SaaS Editor  | 




More information about the Openvas-devel mailing list