Even after PHP2Shell, blast radius matters more than a CVSS score
Summary
The article discusses the rapid exploitation of critical vulnerabilities, using PHP2Shell as an example of how quickly attackers can act. It emphasizes that the blast radius, or the potential impact of a breach, is more critical than the CVSS score, advocating for measures like limiting service account and API key access to mitigate damage.
IFF Assessment
The article highlights the rapid exploitation of vulnerabilities and the significant damage that can occur even when a vulnerability's CVSS score might not fully reflect the potential blast radius, indicating bad news for defenders.
Defender Context
This article serves as a crucial reminder to defenders that focusing solely on CVSS scores when prioritizing patches can be a critical oversight. Attackers can move incredibly fast, making the potential impact (blast radius) and the security posture of associated accounts and credentials equally, if not more, important than the raw vulnerability severity.