Hello,
I am using Greenbone Security Assistant (GSA) / OpenVAS version 24.5 and have created two overrides. Unfortunately, the new severity level is not taken into account in the reports. Is there a detailed description for the override function? Or can I search for log entries?
Many thanks for the link to the documentation. I have checked the override, but I have not found the error.
Just to be sure, the override function already changes the “severity” in the report ?
Because the override has no effect.
This my override:
|NVT-Name|
[AVM FRITZ!Box Information Disclosure Vulnerability (Nov 2024) - Active Check]
Ein Problem der Zutrittskontrolle in der Komponente /juis-boxinfo.xml von AVM FRITZ!Box 7530 AX v7.59 ermöglicht es Angreifern, sensible Informationen ohne Authentifizierung zu erhalten. HINWEIS: Dies wird vom Lieferanten bestritten, weil es nicht reproduziert werden kann, und der Ausgabebericht konzentriert sich auf eine unbeabsichtigte Konfiguration mit direkter Internet-Exposition. Auserdem geht es im getesteten WLAN um eine Fritz!Box 7590 v.8.03. Ich gehe davon aus, dass es kein hoch kritisches Risiko ist.
An access control issue in the /juis-boxinfo.xml component of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: This is disputed by the vendor because it cannot be reproduced, and the issue report focuses on an unintended configuration with direct Internet exposure. Furthermore, the WLAN tested is a Fritz!Box 7590 v.8.03. I assume that it is not a highly critical risk.