Comment by ofjcihen
5 hours ago
Most goalposts I’ve seen say “bad but clumsy”.
Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is.
5 hours ago
Most goalposts I’ve seen say “bad but clumsy”.
Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is.
Practioners are pretty well settled on how big a deal platform-wide RCE is.
They are, and again, believe it or not, more goes into it than “RCE bad”.
Ease of exploitation, feasibility do play a part which I’m sure surprises you.
With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.