TechnologyVulnerability triage: severity ratings and business cost
The New Stack uses a critical-severity finding on a disposable test system to illustrate what CVSS can't tell you: which flaws actually cost money.
TLDR
The New Stack describes a critical-severity finding involving a test database on a disposable system. The publisher says this illustrates a vulnerability-triage problem: CVSS severity ratings don't tell you which flaws actually cost money.
Vulnerability triage: severity ratings and business cost
The New Stack uses a critical-severity finding on a disposable test system to illustrate what CVSS can't tell you: which flaws actually cost money.
TLDR
The New Stack describes a critical-severity finding involving a test database on a disposable system. The publisher says this illustrates a vulnerability-triage problem: CVSS severity ratings don't tell you which flaws actually cost money.