Skip to main content

Questions tagged [impact]

The measurable quantity of resources that is lost or gained as the result of making a security decision.

Filter by
Sorted by
Tagged with
1 vote
1 answer

Business impact assessments and quantifying impact

I have been looking into business impact assessments and I am confused about the "Impact" part. I have been asked several times about what the impact would be when a system fails, and it ...
Mattey's user avatar
  • 57
0 votes
1 answer

Certificate Signed Using Weak Hashing Algorithm impact on a workstation

I did a vulnerability scan on some of our company workstations. These are workstations used by employees (dev, HR, accounting, etc.) to do their job. One of the common result I found is SSL/TLS ...
Finn's user avatar
  • 13
1 vote
2 answers

CVSS3.0 impact score and exploitability score

I'm having some trouble calculating CVSS v3.0 scores in some findings I've encountered. In particular, one finding is a simple server information disclosure via default error pages. It is very ...
user1118764's user avatar
-4 votes
1 answer

Impact of remote OS command injector attack [closed]

I observed that my system is vulnerable to remote OS command injector attack. What would be the impact of Remote OS command injector attack?
user233558's user avatar
1 vote
2 answers

Calculating Business Impact of Technical Vulnerability Issues

Is there any predefined, globally accepted methodology, framework or standard specifically on calculating Business Impact of technical (Network, Web, Mobile..) vulnerability issues? Scoring and ...
Anuruddha's user avatar
4 votes
2 answers

Does CVSS v3 evaluate the impact of vulnerability on the host?

Recently after checking out the Heartbleed vulnerability I was taking a look at its CVSS score (AV:N/AC:L/Au:N/C:P/I:N/A:N) and noticed the following (partial) addendum: CVSS V2 scoring evaluates ...
Juxhin's user avatar
  • 143
7 votes
6 answers

How important is it to protect demo data by HTTPS enabled server?

If the application is not in production mode, there is no commercial contract signed with customer yet, and you just want to give a link to the customer (or give the demo yourself) so that they can ...
gurvinder372's user avatar
5 votes
1 answer

What is the impact of certificate validation level (or class) on deployed web applications?

Certificates can have a class level (or validation level). What is the impact of these levels on deployed web applications? More specifically: Is the certificate level included in the certificate ...
Jérôme Verstrynge's user avatar
6 votes
3 answers

Can you provide loss values on security breaches?

When someone says "why do we need to spend so much money and effort on security, we need to focus on market share first and once someone finds a problem we will fix it", I would like to have a list ...
user avatar