A software defect allows a user to access records without permission. What is the defect itself called?

### Why this is right A vulnerability is a weakness in a system. The unauthorized-record flaw is the weakness, regardless of whether anyone has used it. ### The concept An exploit is a method for using a weakness. A threat concerns the likelihood or actor, and an attack is the action sequence. Keeping these terms distinct helps describe security incidents accurately. ### The other options - **An exploit**: a method that takes advantage of the flaw. - **A threat**: the likelihood of exploitation or a capable, motivated actor. - **An attack**: actions that use the weakness. ### Terms - **Vulnerability**: a weakness that may be exploited. - **Exploit**: a method for taking advantage of a weakness. - **Threat**: likelihood or source of potential exploitation. - **Attack**: actions taken to exploit a weakness. ### Remember The flaw is the vulnerability; the method and actions are the exploit and attack.