Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
216 changes: 108 additions & 108 deletions mappings/cvss_v3/cvss_v3.json
Original file line number Diff line number Diff line change
Expand Up @@ -846,173 +846,173 @@
]
},
{
"id": "cryptographic_weakness",
"children": [
"id": "cryptographic_weakness",
"children": [
{
"id": "insufficient_entropy",
"children": [
"id": "insufficient_entropy",
"children": [
{
"id": "limited_rng_entropy_source",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
"id": "limited_rng_entropy_source",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "use_of_trng_for_nonsecurity_purpose",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"id": "prng_seed_reuse",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "predictable_prng_seed",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "small_seed_space_in_prng",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "initialization_vector_reuse",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "predictable_initialization_vector",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
}
]
{
"id": "use_of_trng_for_nonsecurity_purpose",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"id": "prng_seed_reuse",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "predictable_prng_seed",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "small_seed_space_in_prng",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "initialization_vector_reuse",
"cvss_v3": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "predictable_initialization_vector",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"
}
]
},
{
"id": "insecure_implementation",
"children": [
"id": "insecure_implementation",
"children": [
{
"id": "missing_cryptographic_step",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
"id": "missing_cryptographic_step",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
},
{
"id": "improper_following_of_specification",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
"id": "improper_following_of_specification",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
}
]
]
},
{
"id": "weak_hash",
"children": [
"id": "weak_hash",
"children": [
{
"id": "lack_of_salt",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
"id": "lack_of_salt",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
},
{
"id": "use_of_predictable_salt",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
"id": "use_of_predictable_salt",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
},
{
"id": "predictable_hash_collision",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
"id": "predictable_hash_collision",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"
}
]
]
},
{
"id": "insufficient_verification_of_data_authenticity",
"children": [
"id": "insufficient_verification_of_data_authenticity",
"children": [
{
"id": "identity_check_value",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
"id": "identity_check_value",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
},
{
"id": "cryptographic_signature",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
"id": "cryptographic_signature",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
]
]
},
{
"id": "insecure_key_generation",
"children": [
"id": "insecure_key_generation",
"children": [
{
"id": "improper_asymmetric_prime_selection",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
"id": "improper_asymmetric_prime_selection",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"id": "improper_asymmetric_exponent_selection",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
"id": "improper_asymmetric_exponent_selection",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"id": "insufficient_key_stretching",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
"id": "insufficient_key_stretching",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N"
},
{
"id": "insufficient_key_space",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"id": "key_exchange_without_entity_authentication",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
"id": "insufficient_key_space",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"id": "key_exchange_without_entity_authentication",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
]
]
},
{
"id": "key_reuse",
"children": [
"id": "key_reuse",
"children": [
{
"id": "lack_of_perfect_forward_secrecy",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"id": "intra-environment",
"cvss_v3": "AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"id": "inter-environment",
"cvss_v3": "AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
]
"id": "lack_of_perfect_forward_secrecy",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"id": "intra-environment",
"cvss_v3": "AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"id": "inter-environment",
"cvss_v3": "AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
]
},
{
"id": "side-channel_attack",
"children": [
"id": "side-channel_attack",
"children": [
{
"id": "padding_oracle_attack",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
"id": "padding_oracle_attack",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "timing_attack",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
"id": "timing_attack",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "power_analysis_attack",
"cvss_v3": "AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
"id": "power_analysis_attack",
"cvss_v3": "AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "emanations_attack",
"cvss_v3": "AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
"id": "emanations_attack",
"cvss_v3": "AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"id": "differential_fault_analysis",
"cvss_v3": "AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
"id": "differential_fault_analysis",
"cvss_v3": "AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
]
]
},
{
"id": "use_of_expired_cryptographic_key_or_cert",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L"
"id": "use_of_expired_cryptographic_key_or_cert",
"cvss_v3": "AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"id": "incomplete_cleanup_of_keying_material",
"cvss_v3": "AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
"id": "incomplete_cleanup_of_keying_material",
"cvss_v3": "AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L"
}
]
]
},
{
"id": "broken_cryptography",
"children": [
"id": "broken_cryptography",
"children": [
{
"id": "use_of_broken_cryptographic_primitive",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
"id": "use_of_broken_cryptographic_primitive",
"cvss_v3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"id": "use_of_vulnerable_cryptographic_library",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
"id": "use_of_vulnerable_cryptographic_library",
"cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
]
]
},
{
"id": "privacy_concerns",
Expand Down
Loading