From c39d933556053fb433fe4d0a98a3213720f737f4 Mon Sep 17 00:00:00 2001 From: Abhinav Nain <156283939+abhinav-nain@users.noreply.github.com> Date: Wed, 3 Apr 2024 15:37:57 +0530 Subject: [PATCH] Adding Changelog and Release Date (#411) --- CHANGELOG.md | 20 ++++++++++++++++++++ vulnerability-rating-taxonomy.json | 2 +- 2 files changed, 21 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f037b99..d7685c9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,26 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p ### Changed +## [v1.13](https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.12...v1.13) - 2024-04-02 +### Added +- Physical Security Issues - Bypass of physical access control - VARIES +- Physical Security Issues - Weakness in physical access control - Clonable Key - VARIES +- Physical Security Issues - Weakness in physical access control - Master Key Identification - VARIES +- Physical Security Issues - Weakness in physical access control - Commonly Keyed System - P2 +- Insecure OS/Firmware - Weakness in Firmware Updates - Firmware cannot be updated - VARIES +- Insecure OS/Firmware - Weakness in Firmware Updates - Firmware does not validate update integrity- P3 +- Insecure OS/Firmware - Weakness in Firmware Updates - Firmware is not encrypted- P5 +- Insecure OS/Firmware - Kiosk Escape or Breakout - VARIES +- Insecure OS/Firmware - Poorly Configured Disk Encryption - VARIES +- Insecure OS/Firmware - Shared Credentials on Storage - P3 +- Insecure OS/Firmware - Over-Permissioned Credentials on Storage - P2 +- Insecure OS/Firmware - Local Administrator on default environment - P2 +- Insecure OS/Firmware - Poorly Configured Operating System Security - VARIES +- Insecure OS/Firmware - Recovery of Disk Contains Sensitive Material - VARIES +- Insecure OS/Firmware - Failure to Remove Sensitive Artifacts from Disk - VARIES +- Insecure OS/Firmware - Data not encrypted at rest - Sensitive - VARIES +- Insecure OS/Firmware - Data not encrypted at rest - Non sensitive - P5 + ## [v1.12](https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.11...v1.12) - 2023-12-18 ### Added - Application Level DoS - Excessive Resource Consumption - Injection (Prompt) - VARIES diff --git a/vulnerability-rating-taxonomy.json b/vulnerability-rating-taxonomy.json index 87dbc84..bed03ed 100644 --- a/vulnerability-rating-taxonomy.json +++ b/vulnerability-rating-taxonomy.json @@ -1,6 +1,6 @@ { "metadata": { - "release_date": "2023-12-18T00:00:00+00:00" + "release_date": "2024-04-02T00:00:00+00:00" }, "content": [ {