Misconfiguration

Also written: misconfigurations

A setting that weakens security in software that otherwise works fine, such as the shop's web server serving its .git folder, or a public bucket.

Where the book teaches it