Question: Assume that two vulnerabilities, x and Y , for example, are scored equally on the Attack Vector ( AV ) ,
Assume that two vulnerabilities, and Y for example, are scored equally on the Attack Vector AV Attack Complexity AC and Privileges Required PR metrics in the Base Metric group.
In terms of User Interaction UI however:
Assume that, vulnerability requires some sort of user action before the vulnerability can be exploited and vulnerability Y can be exploited without any user interaction. That is an attacker can exploit vulnerability at will and does not need the user to participate to make the attack successful.
Given the above assumptions, which vulnerability will receive a greater CVSS v Base Score ie which one is worse?
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
