Cisco is planning to issue security severity scores as part of its security advisories. The programme is designed to help users pick the vulnerabilities that require the most attention. Current severity ratings are generally limited to descriptions such as 'critical' or 'moderate'. The new scoring system provides a more efficient way to prioritise patches.
"Customers can now compute a score allowing them to set priorities based on the risk to the specific environment," said Russ Smoak, director of technical support for Cisco's security response team. The scores will be calculated according to the Common Vulnerability Scoring System (CVSS) co-created by Cisco and maintained by the independent Forum for Incident Response and Security Teams. The networking vendor follows Oracle in embracing the standard in its security disclosures.
View: The full story
News source: vnunet
"Customers can now compute a score allowing them to set priorities based on the risk to the specific environment," said Russ Smoak, director of technical support for Cisco's security response team. The scores will be calculated according to the Common Vulnerability Scoring System (CVSS) co-created by Cisco and maintained by the independent Forum for Incident Response and Security Teams. The networking vendor follows Oracle in embracing the standard in its security disclosures.
View: The full story News source: vnunet
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.