Which of the following is not a common threat to cloud applications that should be considered during threat modeling?

Using components with known vulnerabilities

Broken authentication

Sensitive data exposure

Firmware vulnerabilities