On Wednesday 21 December 2011 20:15:18 Michael Meyer wrote: > But i agree with you. IMHO a risk_factor of Medium is much too > high. I would prefer to set the risk_factor to "None" and make > this NVT just informational. > > Any thoughts?
the best approach is to assign a CVSS carefully according to official guidelines. This ensures we have a rationale (the vector) documented. If possible, any additional consideration should be added to the description so that it becomes transparent why a NVT is assigned a certain threat level. -- Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
