sd-client running in non networked VM implemented
MITIGQW20 · Implemented: In place. · Defined in mitigations.py:845
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Plaintext submissions exfiltrated THREATQW40 | partially mitigated | 6 medium | 6 medium |
| Journalist Interface credentials exfiltrated (passphrase, single code, username), and API token THREATQW38 | partially mitigated | 4 medium | 4 medium |
| Adversary exploits gzip parsing to get code execution THREATQW37 | accepted | 3 low | 2 low |