diff --git a/objects/vulnerability/definition.json b/objects/vulnerability/definition.json index 88f0604..5d41971 100644 --- a/objects/vulnerability/definition.json +++ b/objects/vulnerability/definition.json @@ -5,17 +5,17 @@ "references", "vulnerable_configuration", "summary", - "text", + "description", "id" ], "attributes": { "id": { - "description": "Vulnerability ID (generally CVE, but not necessarely). The id is not required as the object itself has an UUID and the CVE id can updated later.", + "description": "Vulnerability ID (generally CVE, but not necessarely). The id is not required as the object itself has an UUID and the CVE id can be update or assigned later.", "ui-priority": 0, - "misp-attribute": "vulnerability", + "misp-attribute": "text", "multiple": true }, - "text": { + "description": { "description": "Description of the vulnerability", "ui-priority": 0, "misp-attribute": "text" @@ -69,10 +69,29 @@ ], "disable_correlation": true, "misp-attribute": "text" + }, + "cvss-score": { + "description": "Score of the Common Vulnerability Scoring System (version 3).", + "ui-priority": 1, + "disable_correlation": true, + "misp-attribute": "float" + }, + "cvss-string": { + "description": "String of the Common Vulnerability Scoring System (version 3).", + "ui-priority": 1, + "disable_correlation": true, + "misp-attribute": "text" + }, + "credit": { + "description": "Who reported/found the vulnerability such as an organisation, person or nickname.", + "ui-priority": 0, + "disable_correlation": true, + "misp-attribute": "text", + "multiple": true } }, - "version": 4, - "description": "Vulnerability object describing a common vulnerability enumeration which can describe unpublished, under review or embargo vulnerability for software, equipments or hardware.", + "version": 5, + "description": "Vulnerability object describing a common vulnerability enumeration which can describe published, unpublished, under review or embargo vulnerability for software, equipments or hardware.", "meta-category": "network", "uuid": "81650945-f186-437b-8945-9f31715d32da", "name": "vulnerability"