Tweeted twitter.com/#!/StackSecurity/status/101357445909188608
2 edited tags
| link
1
source | link

What does the Local exactly mean in CVSS ?

CVSS (http://www.first.org/cvss/) provides the keyword local in the base vector. The definition given by FIRST is somehow not so clear for me: Local: Exploiting the vulnerability requires either physical access to the target or a local (shell) account on the target. Can anyone provide me with clear definition for it? I mean is it localhost? is it desktop application that are not available through HTTP?