@@ -10,6 +10,26 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
10
10
11
11
### Changed
12
12
13
+ ## [ v1.13] ( https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.12...v1.13 ) - 2024-04-02
14
+ ### Added
15
+ - Physical Security Issues - Bypass of physical access control - VARIES
16
+ - Physical Security Issues - Weakness in physical access control - Clonable Key - VARIES
17
+ - Physical Security Issues - Weakness in physical access control - Master Key Identification - VARIES
18
+ - Physical Security Issues - Weakness in physical access control - Commonly Keyed System - P2
19
+ - Insecure OS/Firmware - Weakness in Firmware Updates - Firmware cannot be updated - VARIES
20
+ - Insecure OS/Firmware - Weakness in Firmware Updates - Firmware does not validate update integrity- P3
21
+ - Insecure OS/Firmware - Weakness in Firmware Updates - Firmware is not encrypted- P5
22
+ - Insecure OS/Firmware - Kiosk Escape or Breakout - VARIES
23
+ - Insecure OS/Firmware - Poorly Configured Disk Encryption - VARIES
24
+ - Insecure OS/Firmware - Shared Credentials on Storage - P3
25
+ - Insecure OS/Firmware - Over-Permissioned Credentials on Storage - P2
26
+ - Insecure OS/Firmware - Local Administrator on default environment - P2
27
+ - Insecure OS/Firmware - Poorly Configured Operating System Security - VARIES
28
+ - Insecure OS/Firmware - Recovery of Disk Contains Sensitive Material - VARIES
29
+ - Insecure OS/Firmware - Failure to Remove Sensitive Artifacts from Disk - VARIES
30
+ - Insecure OS/Firmware - Data not encrypted at rest - Sensitive - VARIES
31
+ - Insecure OS/Firmware - Data not encrypted at rest - Non sensitive - P5
32
+
13
33
## [ v1.12] ( https://github.com/bugcrowd/vulnerability-rating-taxonomy/compare/v1.11...v1.12 ) - 2023-12-18
14
34
### Added
15
35
- Application Level DoS - Excessive Resource Consumption - Injection (Prompt) - VARIES
0 commit comments