Report outdated / end-of-life Scan Engine / Environment (local) VERSION 21.4.3

[cfi]

@danipg385

I wouldlike to know why is this marked with an gravity score of 10

The reason is already given in the VT description (which was also posted previously):

NOTE: While this is not, in and of itself, a security vulnerability, a severity is reported to make you aware of a possible decreased scan coverage or missing detection of vulnerabilities on the target due to e.g.:

• missing functionalities
• missing bugfixes
• incompatibilities within the feed

Not using a severity would not make users aware that they are running outdated versions of their scanner component. And as there are e.g. even extensions on the scanner side in minor release jumps like from 21.4.2 to 21.4.3 on which VTs rely to report / detect vulnerabilities it is important to keep the scanner engine up to date.

If you still don’t want to / can’t update to a recent version and accept the risk originating from this you can set an override as mentioned in the VT description:

If you want to accept the risk of a possible decreased scan coverage or missing detection of vulnerabilities on the target you can set a global override for this script as described in the linked GSM manual.

with the reference to:

https://docs.greenbone.net/GSM-Manual/gos-21.04/en/reports.html#creating-an-override