107 - Understanding CVSS Scoring System

YusufOnSecurity.com

Enjoying the content? Let us know your feedback!

Thanks for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain english.
When a vulnerability is discovered, reported ang assigned a score called a CVE its impacts must be understood beyond the CVE number. A common method information security specialists use for this process is the [Common Vulnerability Scoring System (CVSS)](https://www.first.org/cvss/). That is the topic of this week episode.
In addition, we will recap other trending security news includes:

• Atlasian data leak was caused by an employee's stolen credential
• Cisco issued a fix for ClamAV

- https://sec.cloudapps.cisco.com: ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products: February 2023

- https://cve.mitre.org: CVE-2023-20032
- https://www.first.org: CVSS Specification Document

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.