Add CVSS v4 MacroVector to Quality Severity Rating DecisionTable#871
Add CVSS v4 MacroVector to Quality Severity Rating DecisionTable#871ahouseholder merged 7 commits intoCERTCC:mainfrom
Conversation
|
As seen the check_topological order fails for this new Decision Tree added. |
…n' into CVSSv4_QSR
…CVSSv4 rules, but we need them for state coverage.
|
Sorry, I should have made a PR against your branch rather than just pushing to it. But here's what I did:
If anyone were to try to implement a full multi-stage CVSS v4 categorizer using SSVC, then the combination of inputs to the EQ3 and EQ6 In the (somewhat likely #800) case that in the future we make a |
The new file
src/ssvc/decision_tables/cvss/qualitative_severity.pyadded seems to still have some problems generating the CVSS v4 Quality Severity Ratings as specified in www.first.org/cvss/specification-document#New-Scoring-System-Development and available FIRST CVSS repository.May need some work of table mappings to avoid Topology error thrown at this time for this Decision Tree still.