Threat actor: Developer error
Defined in model.py:85
Threats
| Threat | Status | Impact | Likelihood | Risk | After mitigations |
|---|---|---|---|---|---|
| Known vulnerability in any VM template THREATQW22 | mitigated | High | High | 12 high | 6 medium |
| Segmentation between Journalist and Source interfaces THREAT6 | partially mitigated | High | Medium | 9 high | 6 medium |
| Malicious VM template THREATQW28 | mitigated | High | Low | 6 medium | 6 medium |
| Attacker obtains code execution in any VM THREATQW36 | partially mitigated | High | Low | 6 medium | 4 medium |
| Vulnerability introduced in provisioning code THREATQW15 | partially mitigated | High | Medium | 9 high | 3 low |
| Malicious code introduced in SecureDrop repository THREAT28 | mitigated | High | Low | 6 medium | 3 low |
| Malicious code introduced in SecureDrop release THREAT29 | mitigated | High | Low | 6 medium | 3 low |
| Unknown vulnerability in a VM template THREATQW10 | mitigated | High | Low | 6 medium | 3 low |
| MIME hander in sd-app doesn't handle submission format THREATQW8 | mitigated | High | Medium | 9 high | 2 low |
| Vulnerability introduced in code dependency of provisioning code THREATQW2 | avoided | High | Very Low | 3 low | 2 low |