Module: Google::Cloud::SecurityCenter::V1::Cvssv3::PrivilegesRequired
- Defined in:
- proto_docs/google/cloud/securitycenter/v1/vulnerability.rb
Overview
This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability.
Constant Summary collapse
- PRIVILEGES_REQUIRED_UNSPECIFIED =
Invalid value.
0- PRIVILEGES_REQUIRED_NONE =
The attacker is unauthorized prior to attack, and therefore does not require any access to settings or files of the vulnerable system to carry out an attack.
1- PRIVILEGES_REQUIRED_LOW =
The attacker requires privileges that provide basic user capabilities that could normally affect only settings and files owned by a user. Alternatively, an attacker with Low privileges has the ability to access only non-sensitive resources.
2- PRIVILEGES_REQUIRED_HIGH =
The attacker requires privileges that provide significant (e.g., administrative) control over the vulnerable component allowing access to component-wide settings and files.
3