A tester discovers a critical security vulnerability but is told by management to delay reporting it to meet the release deadline. What is the ethically correct action?
-
A
Comply with management and delay the report
-
B
Immediately escalate the issue through appropriate channels regardless of the deadline
-
C
Anonymously leak the vulnerability to the press
-
D
Ignore the vulnerability and proceed with testing other areas