Security Severity Ratings/Client: Difference between revisions

Jump to navigation Jump to search
Fix typos
(clarify that safe nullptr crashes are often not security issues at all)
(Fix typos)
Line 39: Line 39:
|}
|}


;'''sec-moderate''':  Moderate severity represents a fairly wide range of issues, that include: Vulnerabilities that would be considered a sec-high but require the user to perform unusual or complex actions or is limited in scope of affected users or capability, . Vulnerabilities which can provide an attacker additional information or positioning that could be used in combination with other vulnerabilities. Disclosure of sensitive information that represents a violation of privacy but by itself does not expose sensitive user data or uniquily identify the user. Many types of application Denial of Service.
;'''sec-moderate''':  Moderate severity represents a fairly wide range of issues, that include: Vulnerabilities that would be considered a sec-high but require the user to perform unusual or complex actions or is limited in scope of affected users or capability. Vulnerabilities which can provide an attacker additional information or positioning that could be used in combination with other vulnerabilities. Disclosure of sensitive information that represents a violation of privacy but by itself does not expose sensitive user data or uniquely identify the user. Many types of application Denial of Service.
{| class="wikitable collapsible " style="width: 100%"
{| class="wikitable collapsible " style="width: 100%"
! ''sec-moderate Examples:''
! ''sec-moderate Examples:''
4

edits

Navigation menu