renatoalmeidaoliveira/nbrisk

Question: Missing UI, S Base Metric, Temporal and Environmental?

Closed this issue · 1 comments

Howdy,

I'm looking through the Vulnerabilities sections and is the "User Interaction" (UI) and Scope (S) Base Metric fields missing?
I'm looking at https://www.first.org/cvss/v3.1/specification-document#2-3-Impact-Metrics (Section 2.1)
I see Privileges Required (PR) (which I'm assuming is the Authentication field), Attack Complexity (AC) and Attack Vector (AV).

Is the Scope Field, S (sec 2.2), Temporal Metric Group E, RL, RC (sec 3), and Environmental Metrics CR, IR, AR (sec 4 also missing?

I know the Temporal and Environmental Sections are optional, but they might be a nice inclusion.

Thanks again for the work your putting into this.
-Jake

Current setup is for v2. Hopefully we can get v3 info in the future.