Mailing List Archive

Standardization of Risk Factor in plugin output.
Hello all,

I'm wondering if there has been any thought from the nessus team on
standardizing the risk factor output for plugins. i know they are all CVSS2
compliant now (or most of them are) and that certain levels of CVSS score
equate to certain levels of the nessus rating (INFO,NOTE,WARN,HOLE) however
inside the plugin output the "Risk Factor" area suffers from no standardized
formatting.

some plugins are Risk Factor : None, some are Risk factor :\n\nNone and a
few other variations.

is anyone else using this Risk Factor to key off and if so, how are you
getting around the inconcistencies ?

thanks.

Zate