diff --git a/CHANGELOG.md b/CHANGELOG.md index f037b99..d7685c9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,26 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p ### Changed +## [v1.13](https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.12...v1.13) - 2024-04-02 +### Added +- Physical Security Issues - Bypass of physical access control - VARIES +- Physical Security Issues - Weakness in physical access control - Clonable Key - VARIES +- Physical Security Issues - Weakness in physical access control - Master Key Identification - VARIES +- Physical Security Issues - Weakness in physical access control - Commonly Keyed System - P2 +- Insecure OS/Firmware - Weakness in Firmware Updates - Firmware cannot be updated - VARIES +- Insecure OS/Firmware - Weakness in Firmware Updates - Firmware does not validate update integrity- P3 +- Insecure OS/Firmware - Weakness in Firmware Updates - Firmware is not encrypted- P5 +- Insecure OS/Firmware - Kiosk Escape or Breakout - VARIES +- Insecure OS/Firmware - Poorly Configured Disk Encryption - VARIES +- Insecure OS/Firmware - Shared Credentials on Storage - P3 +- Insecure OS/Firmware - Over-Permissioned Credentials on Storage - P2 +- Insecure OS/Firmware - Local Administrator on default environment - P2 +- Insecure OS/Firmware - Poorly Configured Operating System Security - VARIES +- Insecure OS/Firmware - Recovery of Disk Contains Sensitive Material - VARIES +- Insecure OS/Firmware - Failure to Remove Sensitive Artifacts from Disk - VARIES +- Insecure OS/Firmware - Data not encrypted at rest - Sensitive - VARIES +- Insecure OS/Firmware - Data not encrypted at rest - Non sensitive - P5 + ## [v1.12](https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.11...v1.12) - 2023-12-18 ### Added - Application Level DoS - Excessive Resource Consumption - Injection (Prompt) - VARIES diff --git a/vulnerability-rating-taxonomy.json b/vulnerability-rating-taxonomy.json index 87dbc84..bed03ed 100644 --- a/vulnerability-rating-taxonomy.json +++ b/vulnerability-rating-taxonomy.json @@ -1,6 +1,6 @@ { "metadata": { - "release_date": "2023-12-18T00:00:00+00:00" + "release_date": "2024-04-02T00:00:00+00:00" }, "content": [ {