Use Severity ranking in OVAL when the CVSS scores are empty.

2017-05-21 23:04:21 +09:00
parent eb02bdd95a
commit a31974a3c0
4 changed files with 278 additions and 7 deletions
--- a/models/cvecontents_test.go
+++ b/models/cvecontents_test.go
@@ -158,6 +158,22 @@ func TestMaxCvss2Scores(t *testing.T) {
 				},
 			},
 		},
+		// Severity in OVAL
+		{
+			in: CveContents{
+				Ubuntu: {
+					Type:     Ubuntu,
+					Severity: "HIGH",
+				},
+			},
+			out: CveContentCvss2{
+				Type: Ubuntu,
+				Value: Cvss2{
+					Score:    10,
+					Severity: "HIGH",
+				},
+			},
+		},
 		// Empty
 		{
 			in: CveContents{},