Hello, in the light of the recent change requests we have noticed that the mapping between CVSS base score and Risk Factor was not expressed very clearly in the change request #42 in the past and did not necessarily reflect the way it was used.
I have tried to make the specification as unambiguous as possible, please check http://www.openvas.org/openvas-cr-42.html and let me know if there are any open questions. This mapping will become redundant once change request #58 is implemented, but until then I'd like to ask NVT authors to use the mapping described in change request #42 if they do not do so already. For reference, all NVTs currently in the OpenVAS SVN do match the specification, so there is no need for anyone to change existing NVTs. Regards, Michael -- Michael Wiegand | Greenbone Networks GmbH | http://www.greenbone.net/ Neuer Graben 17, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-plugins mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
