CWAP · Module 14 — Reporting

Severity, CVSS and retest

Animated, step-by-step: scoring one finding vector by vector, where scoring goes wrong, writing for executives and engineers, and the retest loop that closes the cycle.

Module 14CVSS 3.1Defensible severityRetest

—

◤ Attacker workstation

🐀

you

idle

—

◤ On the wire

◤ Server

key material

—

waiting

attacker

server

hunter@cwap — bash

1× 0:00 / 0:00 step 1 / 1