What are the metric values of the confidentiality based on the CVSS framework?