From 1f74bf059c9a46b3afd0c255e299294e86a7b58f Mon Sep 17 00:00:00 2001 From: Michael Kaufmann Date: Fri, 10 Nov 2023 22:12:15 +0100 Subject: [PATCH] adjust security.md Signed-off-by: Michael Kaufmann --- SECURITY.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index 79891fa2..7aeed9ca 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -35,6 +35,8 @@ Only reproducible issues on a default/clean setup from the latest stable release - Theoretical attacks without proof of exploitability - Attacks that are the result of a third party library should be reported to the library maintainers - Social engineering +- Attacks that require disabling security features or reducing the security level of the environment +- Exploits by an admin user itself (privileged user and implicitly trusted) - Reflected file download - Physical attacks - Weak SSL/TLS/SSH algorithms or protocols