Study. uk . com
  1. Home
  2. All questions
  3. Question 131

CompTIA Security+ study material · question 131 of 611

Who is best placed to supply the Environmental metric values for a vulnerability?

  1. The product vendor
  2. The national vulnerability database
  3. The researcher who reported the flaw
  4. The organisation running the software
Show the answer

Answer: D. The organisation running the software

Only the consumer knows the mitigations present and the criticality of the affected system in its own environment.

Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › Assessment

Challenge yourself on this topic → Study as cards