Vulnerability management system for information resource configurations