English | Deutsch
Home »

OpenVAS Change Request #42: Adoption of Risk Factor standard for NVT's

Status: Voted +4. Done.

Purpose

To indicate Risk Factor in a standard way in NVT's through script_tag() instead of embedding inside the description. Thus making it possible to run statistics and other analysis for reports based on this type of scoring.

References

Rationale

Currently Risk Factor is being set in some of the NVT's as part of the description text to indicate the severity of the vulnerability. There's no standard format being followed by NVT developers. And since the risk factor is hidden in the text, it can not be processed automatically.

The general goal is to to indicate Risk Factor in a standard way, through script_tag() function like other attributes of NVT.

Effects

Design and Implementation

The implementation needs to incorporate the following changes:

History