Which of the following terms refers to vulnerable account management functions, including account update, recovery of forgotten or lost passwords, and password reset, that might weaken valid…

The correct answer is B. Broken account management. The term "broken account management" refers to vulnerabilities in the account management functions of web applications, which can weaken valid authentication schemes. This can include issues with how accounts are created, updated, managed, and deleted, as well as how users…

Incident Handling and Response Technologies

Question

Which of the following terms refers to vulnerable account management functions, including account update, recovery of forgotten or lost passwords, and password reset, that might weaken valid authentication schemes?

Options

ASQL injection
BBroken account management
CDirectory traversal
DCross-site scripting

How the community answered

(60 responses)

A
3% (2)
B
88% (53)
C
7% (4)
D
2% (1)

Explanation

The term "broken account management" refers to vulnerabilities in the account management functions of web applications, which can weaken valid authentication schemes. This can include issues with how accounts are created, updated, managed, and deleted, as well as how users recover forgotten passwords or perform password resets. Poorly implemented account management functions can allow attackers to bypass authentication, elevate privileges, or assume the identity of another user. This weakness is a significant security concern because it directly impacts the ability of a system to safeguard user data and maintain operational integrity.

Topics

#broken account management#authentication vulnerabilities#password reset#web application security

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice