Security weakness which allows an attacker to reduce a system's information assurance.