Zope 2

  1. Bug #978980
  2. Comment #1

Comment 1 for bug 978980

Revision history for this message
Matthew Wilkes (matthew-matthewwilkes) wrote :

Environmental scores aren't set by the vendor:

CVSS Base Score
      5
Impact Subscore
      2.9
Exploitability Subscore
      10
CVSS Temporal Score
      Undefined
CVSS Environmental Score
      Undefined
Overall CVSS Score
      5

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

When we release patches that gets multiplied by 0.74 for the temporal score, but the base score is almost always 5.