Vulnerability severity update

Author: hcastilho

angularjs-library-with-known-vulnerabilities.md

@@ -2,15 +2,15 @@
 name: AngularJS library with known vulnerabilities
 severity: low
 cvss-score: 4.8
-cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
 cwe-id: CWE-1035
 cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
 compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.8.9
   owasp10: A5, A6
   pci: '6.2'
-  PCI v4.0: pci4-6.2.4, pci4-6.3.3
+  PCI-DSS v4.0.1: 6.2.4, 6.3.3
 
 ---            
 

application-error-message.md

@@ -2,15 +2,15 @@
 name: Application error message
 severity: medium
 cvss-score: 5.3
-cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
 cwe-id: CWE-550
 cwe-name: Server-generated Error Message Containing Sensitive Information
 compliance:
   HIPAA: 164.306(a)
-  ISO 27001: A.5.33, A.5.34, A.8.4, A.8.9, A.8.12
+  ISO 27001: A.5.33, A.5.34, A.8.4, A.8.9, A.8.12, A.8.25
   owasp10: A5
   pci: 6.5.5
-  PCI v4.0: pci4-6.2.4
+  PCI-DSS v4.0.1: 6.2.4
 
 ---            
 

aspnet-debugging-enabled.md

@@ -2,15 +2,15 @@
 name: ASP.NET debugging enabled
 severity: low
 cvss-score: 5.3
-cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
 cwe-id: CWE-489
 cwe-name: Active Debug Code
 compliance:
   HIPAA: 164.306(a), 164.312(a)(1), 164.312(d)
-  ISO 27001: A.5.33, A.5.34, A.8.4, A.8.9, A.8.12, A.8.15
+  ISO 27001: A.5.33, A.5.34, A.8.4, A.8.9, A.8.12, A.8.15, A.8.25
   owasp10: A1, A5
   pci: 6.5.5
-  PCI v4.0: pci4-6.2.4
+  PCI-DSS v4.0.1: 6.2.4
 
 ---            
 

aspnet-tracing-enabled.md

@@ -1,16 +1,16 @@
 ---
 name: ASP.NET tracing enabled
 severity: high
-cvss-score: 9.1
-cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
+cvss-score: 8.2
+cvss-vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
 cwe-id: CWE-11
 cwe-name: 'ASP.NET Misconfiguration: Creating Debug Binary'
 compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.5.33, A.5.34, A.8.4, A.8.9, A.8.12
   owasp10: A5
   pci: 6.5.5
-  PCI v4.0: pci4-6.2.4
+  PCI-DSS v4.0.1: 6.2.4
 
 ---            
 

aspnet-viewstate-without-mac.md

@@ -1,15 +1,15 @@
 ---
 name: ASP.NET ViewState without MAC
-severity: low
+severity: medium
 cvss-score: 5.3
-cvss-vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
 cwe-id: CWE-642
 cwe-name: External Control of Critical State Data
 compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.8.9
   owasp10: A5
-  PCI v4.0: pci4-6.2.4
+  PCI-DSS v4.0.1: 6.2.4
 
 ---            
 

axios-library-with-known-vulnerabilities.md

@@ -2,15 +2,15 @@
 name: Axios library with known vulnerabilities
 severity: low
 cvss-score: 4.8
-cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
 cwe-id: CWE-1035
 cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
 compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.8.9
   owasp10: A5, A6
   pci: '6.2'
-  PCI v4.0: pci4-6.2.4, pci4-6.3.3
+  PCI-DSS v4.0.1: 6.2.4, 6.3.3
 
 ---            
 

backbone-library-with-known-vulnerabilities.md

@@ -2,15 +2,15 @@
 name: Backbone library with known vulnerabilities
 severity: low
 cvss-score: 4.8
-cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
 cwe-id: CWE-1035
 cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
 compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.8.9
   owasp10: A5, A6
   pci: '6.2'
-  PCI v4.0: pci4-6.2.4, pci4-6.3.3
+  PCI-DSS v4.0.1: 6.2.4, 6.3.3
 
 ---            
 

bootstrap-library-with-known-vulnerabilities.md

@@ -2,15 +2,15 @@
 name: Bootstrap library with known vulnerabilities
 severity: low
 cvss-score: 4.8
-cvss-vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
+cvss-vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
 cwe-id: CWE-1035
 cwe-name: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
 compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.8.9
   owasp10: A5, A6
   pci: '6.2'
-  PCI v4.0: pci4-6.2.4, pci4-6.3.3
+  PCI-DSS v4.0.1: 6.2.4, 6.3.3
 
 ---            
 

browser-content-sniffing-allowed.md

@@ -9,7 +9,7 @@ compliance:
   HIPAA: 164.306(a)
   ISO 27001: A.8.9
   owasp10: A5
-  PCI v4.0: pci4-6.2.4
+  PCI-DSS v4.0.1: 6.2.4
 
 ---            
 

certificate-with-insufficient-key-size-or-usage-or-insecure-signature-algorithm.md

@@ -10,7 +10,7 @@ compliance:
   ISO 27001: A.5.14, A.8.9, A.8.24
   owasp10: A2
   pci: 4.1, 6.5.4
-  PCI v4.0: pci4-4.2.1, pci4-6.2.4
+  PCI-DSS v4.0.1: 4.2.1, 6.2.4
 
 ---