unchanged scope

used to help calculate some scores within CVSS

where the vulnerability exploited cannot be exploited beyond the current security authority

scope