security//vulnerability

A vulnerability is a weakness that can violate a security property under the right conditions. It may live in code, protocol design, configuration, identity policy or an assumption made between components.

A vulnerability is a weakness that can violate a security property under the right conditions. It may live in code, protocol design, configuration, identity policy or an assumption made between components.

A vulnerability is not yet the procedure used against it and not every bug is security-relevant. Severity depends on reachability, prerequisites, impact and the privileges available after exploitation. The same defect can be inert in one architecture and critical in another.

Security lives in chains. A small weakness becomes important when the next link is available.