MSRC-Microsoft-Security-Updates-API icon indicating copy to clipboard operation
MSRC-Microsoft-Security-Updates-API copied to clipboard

What is the meaning of Type Integers in Remediations

Open nnuggets opened this issue 5 years ago • 2 comments

Hello,

What is the meaning of 2 or 5 or other values in the Type field of $cvrfDoc.Vulnerability.Remediations ?

Thanks

nnuggets avatar Jul 20 '19 10:07 nnuggets

It would be great if this answer would be officially documented somewhere, the best I could find is the following:

Vulnerability: Remediation Type 0 is a Workaround Vulnerability: Remediation Type 1 is a Mitigation Vulnerability: Notes: Type 2 is a Description Vulnerability: Notes: Type 4 is an FAQ Vulnerability: Remediation: Type 5 is a Known Issue Vulnerability: Notes: Type 7 is a Tag Vulnerability: Notes: Type 8 is an Issuing CNA

(source: msrc-blog.microsoft.com)

Somewhat confusing though, I believe type 5 provides a description, whereas type 2 provides the actual patch information.

wietze avatar Mar 08 '21 17:03 wietze