From the course: Vulnerability Management: Assessing the Risks with CVSS v3.1

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Solution

Solution

From the course: Vulnerability Management: Assessing the Risks with CVSS v3.1

Start my 1-month free trial

Solution

“

(upbeat music) - [Narrator] So, how customizing the score go? Good, tough, easy. Well, let's dive into this a little bit. Since you already had the base CVSS score, I hope it felt a little bit easier, in this particular situation, we want to use the environmental metrics group to customize the score to the specific situation. I've left the CVSS calculator with the analysis from chapter three, and we'll use the environmental section for this task. Here, we can set the confidentiality, integrity and availability requirements, as well as modify any base metrics. Let's go back to the vulnerability details first, for this situation, the key phrase that makes a difference is in the context of the current user, if you remember under normal circumstances, that's going to mean a normal non privileged user, but Sue isn't a normal user. She has a misery of privileges on her PC. So if we go back to our original analysis around the…

Contents