Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Possible bug in test samples #865

Closed
Tracked by #210
domachine opened this issue Feb 19, 2025 · 1 comment · Fixed by #866
Closed
Tracked by #210

Possible bug in test samples #865

domachine opened this issue Feb 19, 2025 · 1 comment · Fixed by #866
Assignees
Labels
bug csaf 2.1 csaf 2.1 work

Comments

@domachine
Copy link

domachine commented Feb 19, 2025

I just calculated this sample using the "first" calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

For me this results in a base score of 6.5 (MEDIUM).

The same applies to this sample:

https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

For me this results in a base score of 6.5 (MEDIUM) as well.

Am I missing something?

FYI @tschmidtb51

@domachine domachine changed the title Possible bug in test sample Possible bug in test samples Feb 19, 2025
@tschmidtb51 tschmidtb51 self-assigned this Feb 19, 2025
@tschmidtb51 tschmidtb51 added bug csaf 2.1 csaf 2.1 work labels Feb 19, 2025
@tschmidtb51
Copy link
Contributor

This looks like a copy-paste-mistake to me.

tschmidtb51 added a commit to tschmidtb51/csaf that referenced this issue Feb 19, 2025
- resolves oasis-tcs#865
- fix inconsistent CVSS vector (did not align with score and severity) in testdata of 6.1.9
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug csaf 2.1 csaf 2.1 work
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants