Heartbleed Was Bad, but Shellshock Was Worse, Researcher Says

Heartbleed Was Bad, but Shellshock Was Worse, Researcher Says

At the OpenStack Summit, a researcher applied threat-modeling techniques to gauge the potential impact of a vulnerability.


PARIS—At the OpenStack Summit here, a security researcher discussed the recent Heartbleed and Shellshock vulnerabilities and gave a score for the impact of each, based on a number of threat-modeling metrics.