English | Deutsch
Home »

OpenVAS Change Request #42: Adoption of Risk Factor standard for NVT's

Status: Voted +4. Done.


To indicate Risk Factor in a standard way in NVT's through script_tag() instead of embedding inside the description. Thus making it possible to run statistics and other analysis for reports based on this type of scoring.



Currently Risk Factor is being set in some of the NVT's as part of the description text to indicate the severity of the vulnerability. There's no standard format being followed by NVT developers. And since the risk factor is hidden in the text, it can not be processed automatically.

The general goal is to to indicate Risk Factor in a standard way, through script_tag() function like other attributes of NVT.


Design and Implementation

The implementation needs to incorporate the following changes: