Questions tagged [impact]

The measurable quantity of resources that is lost or gained as the result of making a security decision.

Filter by
Sorted by
Tagged with
1
vote
2answers
269 views

CVSS3.0 impact score and exploitability score

I'm having some trouble calculating CVSS v3.0 scores in some findings I've encountered. In particular, one finding is a simple server information disclosure via default error pages. It is very ...
-4
votes
1answer
45 views

Impact of remote OS command injector attack [closed]

I observed that my system is vulnerable to remote OS command injector attack. What would be the impact of Remote OS command injector attack?
1
vote
2answers
145 views

Calculating Business Impact of Technical Vulnerability Issues

Is there any predefined, globally accepted methodology, framework or standard specifically on calculating Business Impact of technical (Network, Web, Mobile..) vulnerability issues? Scoring and ...
4
votes
2answers
398 views

Does CVSS v3 evaluate the impact of vulnerability on the host?

Recently after checking out the Heartbleed vulnerability I was taking a look at its CVSS score (AV:N/AC:L/Au:N/C:P/I:N/A:N) and noticed the following (partial) addendum: CVSS V2 scoring evaluates ...
7
votes
6answers
461 views

How important is it to protect demo data by HTTPS enabled server?

If the application is not in production mode, there is no commercial contract signed with customer yet, and you just want to give a link to the customer (or give the demo yourself) so that they can ...
4
votes
1answer
1k views

What is the impact of certificate validation level (or class) on deployed web applications?

Certificates can have a class level (or validation level). What is the impact of these levels on deployed web applications? More specifically: Is the certificate level included in the certificate ...
6
votes
3answers
371 views

Can you provide loss values on security breaches?

When someone says "why do we need to spend so much money and effort on security, we need to focus on market share first and once someone finds a problem we will fix it", I would like to have a list ...