4 ms·
Not sure why you're being downvoted. Your question is reasonable and any attacker worth their salt will fire a full arsenal of all the CVE's at your environment
by teh_klev 5y ago
Not sure why you're being downvoted. Your question is reasonable and any attacker worth their salt will fire a full arsenal of all the CVE's at your environment regardless of version.
Hiding version numbers etc is an example of "Security through obscurity" and is a weak defence strategy:
https://en.wikipedia.org/wiki/Security_through_obscurity https://en.wikipedia.org/wiki/Security_through_obscurity
- stevenhuang 5y agoAn attacker worth their salt will most definitely not fire all their CVEs at risk of crashing the target process or leaving it in an undefined state. And your second point is debatable. See defense in depth.