A vulnerability is a weakness.
This weakness allows someone to reduce a system’s information assurance. A vulnerability is the intersection of 3 elements:
- a system susceptibility or flaw,
- an attacker access to the flaw,
- an attacker capability to exploit the flaw.
