This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Vulnerability template"
| Line 57: | Line 57: | ||
==References== | ==References== | ||
| − | * | + | * http://www.link1.com |
| − | * [http://www.link2.com | + | * [http://www.link2.com Title for the link] |
Revision as of 04:53, 13 February 2008
Every Vulnerability should follow this template.
Description
A vulnerability is a weakness in an application (frequently a broken or missing countermeasure) that enables an attack to succeed. Be sure you don't put [attacks] or [countermeasures] in this category.
- Start with a one-sentence description of the vulnerability
- What is the problem that creates the vulnerability?
- What are the attacks that target this vulnerability?
- What are the technical impacts of this vulnerability?
Risk Factors
- Talk about the factors that make this vulnerability likely or unlikely to actually happen
- Discuss the technical impact of a successful exploit of this vulnerability
- Consider the likely [business impacts] of a successful attack
Examples
- Short example name
- One paragraph example description with links
- Short example name
- One paragraph example description with links
Related Attacks
Related Vulnerabilities
Note: the contents of "Related Problems" sections should be placed here
Related Countermeasures
Note: contents of "Avoidance and Mitigation" Sections should be placed here
Related Technical Impacts
References
When the article is reviewed, the "Honeycomb" category can be removed and replaced with the "ASDR" category
[[Category:OWASP Honeycomb Project]]
[[Category:OWASP ASDR Project]]
