A system does not present an appropriate legal message or warning to a user who is accessing it.
CVSS Metrics