Reachable Doesn't Mean Exploitable. How to Tell the Difference From Configuration Alone.

Every scanner tells you what's misconfigured. None tells you whether the misconfiguration is exploitable, one change away from exploitable, or just noise. The difference is in the configuration graph. The relationships between resources, not the properties of individual resources. Stave classifies every finding into three tiers: exploitable, one-away, and reachable.

Raccontata dadev.to