** Note that this is a public ticket, please refrain from adding any sensitive data. **

Description of feature:

The newly added server gets the self-set status for the CVE even though the description / explanation for setting this status explicitly states that it does not add the status to newly added servers which weren't present at the time the status got set / created. 

Need Opt-In or Opt-Out function for this feature in order to control the behavior of it.

Steps to Reproduce

1. Click 'Edit status' for the CVE from the 'Action' dropdown
2. Set it to 'No action - risk accepted'
3. Register a host which has this vulnerability