Week 13 NET3203 by Ahmad Fyqrie Bin Ahmad Rozley https://padlet.com/i21020133/if98iim5kx3n1gri en-us 2022-04-04 00:28:16 UTC 2022-04-04 01:50:27 UTC hello@padlet.com Group 4 i21020133 https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127653165 - CVSS overview - WIND
- Metric Groups - Ahmad
- Process & Reports]]> 2022-04-04 00:28:52 UTC https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127653165 CVSS Metric Groups i21020133 https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127660659 Base Metric Group - reflects the severity of a vulnerability according to its intrinsic characteristics which are constant over time and assumes the reasonable worst-case impact across different deployed environments.

Temporal Metric Group - adjust the Base severity of a vulnerability based on factors that change over time, such as the availability of exploit code 

Environmental Metric Group - adjust the Base and Temporal severities to a specific computing environment. ]]> 2022-04-04 00:35:14 UTC https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127660659 CVSS overview i21020115 https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127664499 The Common Vulnerability Scoring System (CVSS) captures the principal technical characteristics of software, hardware, and firmware vulnerabilities. Its outputs include numerical scores indicating the severity of a vulnerability relative to other vulnerabilities. CVSS is composed of three metric groups: Base, Temporal, and Environmental. 

The benefits of CVSS include the provision of a standardized vendor and platform agnostic vulnerability scoring methodology. It is an open framework, providing transparency to the individual characteristics and methodology used to derive a score.]]> 2022-04-04 00:38:22 UTC https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127664499 CVSS Process i21020133 https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127714522 - Uses a tool called CVSS v3.1 Calculator

- The calculator is like a questionnaire in which the choices are made that describe the vulnerability for each metric group. 

- Later, a score is generated and numeric severity rating is displayed.]]> 2022-04-04 01:19:44 UTC https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127714522 CVSS Reports i21020133 https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127716890 For some purposes, it is useful to have a textual representation of the numeric Base, Temporal and Environmental scores. All scores can be mapped to the qualitative ratings defined in the table above.

As an example, a CVSS Base Score of 4.0 has an associated severity rating of Medium. The use of these qualitative severity ratings is optional, and there is no requirement to include them when publishing CVSS scores. They are intended to help organizations properly assess and prioritize their vulnerability management processes.

- The higher the severity rating, the greater the potential impact of an exploit and the greater the urgency in addressing the vulnerability.

- Any vulnerability that exceeds 3.9 should be addressed.
]]> 2022-04-04 01:21:42 UTC https://padlet.com/i21020133/if98iim5kx3n1gri/wish/2127716890