¿Qué significan esas letras del CVSS? Guía para entenderlo de una vez
The article explains the Common Vulnerability Scoring System (CVSS) and its importance in understanding security vulnerabilities. It highlights the difference between the CVSS score and the vector, which provides detailed information about the nature of the vulnerability. Additionally, it discusses the differences between CVSS versions 3.1 and 4.0, emphasizing the new features in the latest version.
- ▪CVSS is a scoring system that describes security vulnerabilities, providing both a score and a vector for detailed understanding.
- ▪The vector answers critical questions about the attack, such as the attack vector, complexity, and required privileges.
- ▪CVSS v4.0 introduces new elements that differentiate impacts on the vulnerable system and subsequent systems.
DEV.to (Top) files mainly under programming. We currently carry 4,877 of its stories.
Opening excerpt (first ~120 words) tap to expand
try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 2290329) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } Byron Antonio Lainez Sasvin Posted on May 24 ¿Qué significan esas letras del CVSS? Guía para entenderlo de una vez #seguridad #cvss #fundamentos Cada vez que sale un CVE importante, alguien pega el vector CVSS en el chat del equipo y todos hacen como que lo entienden. Spoiler: la mayoría solo mira el número (9.1 CRITICAL) e ignora el resto. El problema es que el número solo te dice qué tan grave es. El vector te dice por qué — y eso cambia completamente cómo respondes.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).
Discussion
0 commentsMore from DEV.to (Top)
