diff options
| -rw-r--r-- | cvss/v2scores.go | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/cvss/v2scores.go b/cvss/v2scores.go index 3dec4a3..03bbc24 100644 --- a/cvss/v2scores.go +++ b/cvss/v2scores.go @@ -57,6 +57,7 @@ func newV2Scores(v v2Vector) (v2Scores, error) { auth := 0.0 // temporal score values + // (FIXME: should these be set to 1.0?) exploitability := 0.0 remediationLevel := 0.0 reportConfidence := 0.0 @@ -250,7 +251,7 @@ func newV2Scores(v v2Vector) (v2Scores, error) { // calculate environmental base score using adjusted impact baseExpl := 20 * accessVector * accessComplexity * auth envBaseScore := ((0.6 * adjImpact + 0.4 * baseExpl) - 1.5) * fImpact - envBaseScore = math.Round(10.0 * envBaseScore) / 10.0 + envBaseScore = (10.0 * envBaseScore) / 10.0 // calculate adjusted temporal score adjTempScore := envBaseScore * exploitability * remediationLevel * reportConfidence |