Prior known-ignored disclosure

Evidence summary #

No prior incidents exist for Cap; this factor cannot be assessed. Gray per methodology: 'no prior incidents -> gray' (cannot evaluate ignored disclosure without an incident context).

Sources #

Methodology #

Determine whether evidence exists in prior-incident post-mortems that a disclosed vulnerability was reported to the team and not actioned before exploit.

See the full factor methodology and distribution across all protocols →