2 edited tags
| link
source | link

What does the Local exactly mean in CVSS ?

CVSS ( provides the keyword local in the base vector. The definition given by FIRST is somehow not so clear for me: Local: Exploiting the vulnerability requires either physical access to the target or a local (shell) account on the target. Can anyone provide me with clear definition for it? I mean is it localhost? is it desktop application that are not available through HTTP?