[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nessus
Subject:    Standardization of Risk Factor in plugin output.
From:       "Zate Berg" <zate75 () gmail ! com>
Date:       2009-01-15 19:32:43
Message-ID: 319223270901151132g23714afoecf254132fa90bbe () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hello all,

I'm wondering if there has been any thought from the nessus team on
standardizing the risk factor output for plugins.  i know they are all CVSS2
compliant now (or most of them are) and that certain levels of CVSS score
equate to certain levels of the nessus rating (INFO,NOTE,WARN,HOLE) however
inside the plugin output the "Risk Factor" area suffers from no standardized
formatting.

some plugins are Risk Factor : None, some are Risk factor :\n\nNone and a
few other variations.

is anyone else using this Risk Factor to key off and if so, how are you
getting around the inconcistencies ?

thanks.

Zate

[Attachment #5 (text/html)]

Hello all,<br><br>I&#39;m wondering if there has been any thought from the nessus \
team on standardizing the risk factor output for plugins.&nbsp; i know they are all \
CVSS2 compliant now (or most of them are) and that certain levels of CVSS score \
equate to certain levels of the nessus rating (INFO,NOTE,WARN,HOLE) however inside \
the plugin output the &quot;Risk Factor&quot; area suffers from no standardized \
formatting.<br> <br>some plugins are Risk Factor : None, some are Risk factor \
:\n\nNone and a few other variations.<br><br>is anyone else using this Risk Factor to \
key off and if so, how are you getting around the inconcistencies ?<br><br> \
thanks.<br><br clear="all">Zate<br>



_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

[prev in list] [next in list] [prev in thread] [next in thread]