Which CVSS Exploitation metric describes the level of attacker authentication required to access the target?

Which CVSS Exploitation metric describes the level of attacker authentication required to access the target?

• A. Access Vector
• B. Access Complexity
• C. Authentication
• D. Remediation Level

Answer: (C)

In CVSS, the Authentication metric shows how much attacker authentication is required to exploit a vulnerability. It indicates whether an attacker can exploit it without any credentials, or only after providing valid credentials, and whether more than one authentication step is needed. This directly affects how easily a vulnerability can be exploited in practice: if no authentication is required, exploitation is easier; if credentials are needed, exploitation is more restricted. This is why the correct term is Authentication. Other metrics describe different aspects: Access Vector tells where the attacker must be (remote, local, or adjacent network), Access Complexity describes how difficult the exploit is to carry out once access is gained, and Remediation Level concerns how easily or quickly a vulnerability can be mitigated or patched.

In CVSS, the Authentication metric shows how much attacker authentication is required to exploit a vulnerability. It indicates whether an attacker can exploit it without any credentials, or only after providing valid credentials, and whether more than one authentication step is needed. This directly affects how easily a vulnerability can be exploited in practice: if no authentication is required, exploitation is easier; if credentials are needed, exploitation is more restricted.

This is why the correct term is Authentication. Other metrics describe different aspects: Access Vector tells where the attacker must be (remote, local, or adjacent network), Access Complexity describes how difficult the exploit is to carry out once access is gained, and Remediation Level concerns how easily or quickly a vulnerability can be mitigated or patched.