Sign up to save your podcasts
Or
Share Episode 201 - We broke CVSSv3, now how do we fix it?
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 201 - We broke CVSSv3, now how do we fix it?
Josh and Kurt talk about CVSSv3 and how it's broken. We started with a blog post to explain why the NVD CVSS scores are so wrong, and we ended up researching CVSSv3 and found out it's far more broken than any of us expected in ways we didn't expect. NVD isn't broken, CVSSv3 is. How did we get here? Are there any options that work today? Where should we go next?
Show Notes- Josh's blog post
- NVD
- Red Hat security data
- Josh's CVE data project
- Microsoft security ratings scale
View all episodes
By Josh Bressers
4.7
4040 ratings
Josh and Kurt talk about CVSSv3 and how it's broken. We started with a blog post to explain why the NVD CVSS scores are so wrong, and we ended up researching CVSSv3 and found out it's far more broken than any of us expected in ways we didn't expect. NVD isn't broken, CVSSv3 is. How did we get here? Are there any options that work today? Where should we go next?
Show Notes- Josh's blog post
- NVD
- Red Hat security data
- Josh's CVE data project
- Microsoft security ratings scale
More shows like Open Source Security
View all
Hacked
190 Listeners
The Changelog: Software Development, Open Source
289 Listeners
Security Now (Audio)
2,010 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
373 Listeners
LINUX Unplugged
268 Listeners
Risky Business
373 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
653 Listeners
CyberWire Daily
1,021 Listeners
Late Night Linux
164 Listeners
Smashing Security
318 Listeners
Darknet Diaries
8,035 Listeners
Hacking Humans
315 Listeners
Defense in Depth
74 Listeners
2.5 Admins
98 Listeners
Risky Bulletin
44 Listeners