[Category] Configuration Management [Description] 
Unauthorized access to administration interfaces Unauthorized access to configuration stores Retrieval of clear text Configuration secrets No individual accountability